CVE-2020-8958

针对 CVE-2020-8958 的概念验证脚本，使用 Python 编写。如果成功，脚本将返回 /etc/passwd 的内容。 CVE-2020-8958 广州 1GE ONU V2801RW 1.9.1-181203 至 2.9.0-181024 以及 V2804RGW 1.9.1-181203 至 2.9.0-181024 设备允许远程攻击者通过在 boaform/admin/formPing 的目标 IP 地址字段中使用 shell 元字符来执行任意操作系统命令。 要求 Python 3.X bs4 使用方法 python poc.py...

The vulnerability of the microprogramming software of the Guangzhou 1GE ONU terminals V2801RW and V2804RGW arises from the failure to take measures to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary operating system commands.

The vulnerability of the microprogramming software in the Guangzhou 1GE ONU V2801RW and V2804RGW subscriber terminals is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

VulnCheck KEV: CVE-2020-8958

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field...

CVE-2020-8958

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field...