CVE-2020-8958
57Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 47%
from disclosure to weapon0 days
Published on NVDJul 15
1st PoCJul 15
VulnCheck+484d
exploitation probability
47%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
Affected products
n/a · n/apublic PoCs found — 2
vulncheckvulncheck.com/xdb/7975c36cfe77unverifiedvulncheckvulncheck.com/xdb/7e669a59274dunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.