CyberRota Analysis
AI-GeneratedA vulnerability in the Web Management Interface of Calix GigaSpire 26.1.0 allows remote attackers to manipulate the sessionKey argument in the utilities_configurationsave.cgi file, potentially leading to a denial of service. Organizations using this product should prioritize addressing this issue, as the exploit is publicly available and could disrupt service availability. Immediate action is recommended to mitigate the risk of remote attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.