CVE-2020-8958

CVE-2020-8958 is a critical OS command injection vulnerability affecting Guangzhou 1GE ONU V2801RW and V2804RGW devices, allowing remote attackers to execute arbitrary commands by injecting shell metacharacters into the "Dest IP Address" field. With a CVSS score of 7.2 (High), this vulnerability is easily exploitable over the network with high privileges, leading to complete compromise of confidentiality, integrity, and availability. While no public exploit code is officially available, the high EPSS score and extensive media coverage, including its association with the BotenaGo malware, indicate significant community attention and a high likelihood of exploitation in the wild.