CVE-2020-8958: Gpononu 1ge+3fe+wifi Onu v2804rgw Firmware

High severity, CVSS 7.2. EPSS: 45.7% chance of exploitation in the next 30 days.

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.

Affected products

• Gpononu 1ge+3fe+wifi Onu v2804rgw Firmware: from 1.9.1-181203, up to and including 2.9.0-181024
• Gpononu 1ge Router Wifi Onu v2801rw Firmware: from 1.9.1-181203, up to and including 2.9.0-181024

Published 2020-07-15. Last modified 2026-06-17.