The vulnerability arises from a hard‑coded RSA private key embedded in the firmware of GX Earth 2022 ONT models. An attacker who can obtain the device firmware can recover this key and decrypt HTTPS traffic intended for the device, allowing man‑in‑the‑middle attacks that compromise confidentiality and potentially alter traffic. The weakness is identified as CWE‑321.

GX India GX Earth 1010 and GX Earth 2022 ONT firmware versions prior to the official fixes are affected. The recommended mitigation is to upgrade GX Earth 2022 to any of the following firmware releases: E2022‑3.1.5A, E2022‑3.1.8AV, or E2022‑1.2ASL. For GX Earth 1010 the needed upgrade is to firmware version E1010‑1.2ASL. Devices running older firmware remain vulnerable.

The CVSS score of 8.7 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, which suggests no publicly known exploit yet. The likely attack vector is remote extraction of the hard‑coded key from firmware, requiring firmware download or physical access. Although no public exploit is documented, possession of the private key presents a critical risk for confidentiality and integrity of encrypted communications, so the issue should be treated as high risk and remediated promptly.