{"id":"CVE-2025-54084","state":"PUBLISHED","title":"Calix Gigacenter ONT  - Command Injection","description":"OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.","publishedAt":"2025-09-09T20:37:28.023Z","updatedAt":"2025-09-12T13:59:00.965Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"Fluid Attacks"},"assigner":"Fluid Attacks","products":["Calix GigaCenter ONT"],"affected":[{"vendor":"Calix","product":"GigaCenter ONT","defaultStatus":"unaffected","versions":[{"version":"844E","status":"affected","versionType":"custom"},{"version":"844G","status":"affected","versionType":"custom"},{"version":"844GE","status":"affected","versionType":"custom"},{"version":"854GE","status":"affected","versionType":"custom"}],"modules":["Quantenna SoC"]}],"references":["https://fluidattacks.com/advisories/bacalao","https://www.calix.com","https://revers3everything.com/calix-case-five-0-days-five-cves/"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/54xxx/CVE-2025-54084.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-54084","state":"PUBLISHED","datePublished":"2025-09-09T20:37:28.023Z","dateUpdated":"2025-09-12T13:59:00.965Z","assignerShortName":"Fluid Attacks","assignerOrgId":"84fe0718-d6bb-4716-a7e8-81a6d1daa869","dateReserved":"2025-07-16T15:11:01.685Z"},"containers":{"cna":{"title":"Calix Gigacenter ONT  - Command Injection","descriptions":[{"lang":"en","value":"OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE."}],"affected":[{"vendor":"Calix","product":"GigaCenter ONT","defaultStatus":"unaffected","versions":[{"version":"844E","status":"affected","versionType":"custom"},{"version":"844G","status":"affected","versionType":"custom"},{"version":"844GE","status":"affected","versionType":"custom"},{"version":"854GE","status":"affected","versionType":"custom"}],"modules":["Quantenna SoC"]}],"references":[{"url":"https://fluidattacks.com/advisories/bacalao","tags":["third-party-advisory"]},{"url":"https://www.calix.com","tags":["product","related"]},{"url":"https://revers3everything.com/calix-case-five-0-days-five-cves/","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":8.5,"baseSeverity":"HIGH","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Fluid Attacks","orgId":"84fe0718-d6bb-4716-a7e8-81a6d1daa869","dateUpdated":"2025-09-12T13:59:00.965Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:calix:gigacenter_ont:844e:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:calix:gigacenter_ont:844g:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:calix:gigacenter_ont:844ge:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:calix:gigacenter_ont:854ge:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://fluidattacks.com/advisories/bacalao","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-10T15:55:26.837997Z","id":"CVE-2025-54084","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-10T15:55:56.704Z"}}]}}}