CVE:CVE-2020-8958
CNNVD:CNNVD-202007-1148
Guangzhou V-Solution Telecommunication Technology Guangzhou 1GE ONU是中国广州维讯通信科技有限公司（Guangzhou V-Solution Telecommunication Technology）公司的一款路由器。
Guangzhou 1GE ONU V2801RW 1.9.1-181203版本至2.9.0-181024版本和V2804RGW 1.9.1-181203版本至2.9.0-181024版本中的boaform/admin/formPing存在安全漏洞。远程攻击者可借助Shell元字符利用该漏洞执行任意操作系统命令。
solution:Upgrade gpononu 1ge_router_wifi_onu_v2801rw_firmware to a higher version than 2.9.0-181024,and avoid the version [1.9.1-181203,2.9.0-181024]; Upgrade gpononu 1ge+3fe+wifi_onu_v2804rgw_firmware to a higher version than 2.9.0-181024,and avoid the version [1.9.1-181203,2.9.0-181024]