CVE-2020-8654

CVE-2020-8654 is a critical vulnerability affecting EyesOfNetwork versions 5.1 through 5.3, allowing an authenticated user with sufficient privileges to execute arbitrary operating system commands. This is achieved by manipulating the 'target' field within the AutoDiscovery module's autodiscovery.php script. With a CVSS score of 8.8 (High), the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Exploit code is publicly available, including Metasploit modules and Nuclei templates, indicating a high likelihood of exploitation, though there is no evidence of active exploitation in the wild or significant community discussion.