This vulnerability involves the transmission of user credentials in cleartext over HTTP within the web management interface of GX Earth ONT models. An attacker can capture these plaintext credentials, enabling unauthorized access to the targeted device. The weakness is identified as CWE‑319, indicating improper protection of sensitive data in transit.

The affected vendors are GX INDIA, specifically the GX Earth 1010 and GX Earth 2022 models. All current firmware versions prior to the latest releases lack protection against transmitting credentials over HTTP. Only the firmware updates listed in the official solution contain the fix.

The CVSS score of 8.7 categorizes this flaw as high severity. Although an EPSS score is not available, the nature of cleartext credential transmission makes it highly exploitable in networks where traffic can be sniffed. The threat is not listed in the CISA KEV catalog. The likely attack vector is passive eavesdropping on HTTP traffic; a remote attacker on the same network segment can intercept authentication exchanges and gain unauthorized device control.