CVE-2020-8958
High
Description
Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
SeverityHigh
CVSS7.2
Exploit probability—
ProductGpononu 1ge Router Wifi Onu V2801rw Firmware
PublishedJul 15, 2020
First seenJul 15, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gpononu 1ge_router_wifi_onu_v2801rw_firmware | 1.9.1-181203 ≤ v ≤ 2.9.0-181024 | — |
| gpononu 1ge\+3fe\+wifi_onu_v2804rgw_firmware | 1.9.1-181203 ≤ v ≤ 2.9.0-181024 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.