High severityNVD Advisory· Published Sep 9, 2025· Updated Apr 15, 2026

CVE-2025-54084

Description

OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Calix/GigaCenter ONTllm-create

Patches

Vulnerability mechanics

References

fluidattacks.com/advisories/bacalaonvd
revers3everything.com/calix-case-five-0-days-five-cves/nvd
www.calix.comnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000