mimosa Vulnerabilities and Affected Products
Vulnerabilities associated with b5_firmware.
Products
Clear product- b5_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-25206HIGH | mimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover… CWE-78Jul 20, 2021 | CVSS7.2v3.1 | EPSS5.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |