Vendors / Mimosa Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now Mimosa records in CISA KEV No Mimosa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01336 · Published 2017-05-21 · No fix listed CWE-74
Priority MEDIUM 41
An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01336 · Published 2017-05-21 · No fix listed CWE-74
Priority MEDIUM 40
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.05312 · Published 2021-07-20 · No fix listed CWE-78
Priority LOW 38
An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02577 · Published 2017-05-21 · No fix listed CWE-20
Priority LOW 35
An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01191 · Published 2017-05-21 · No fix listed CWE-200
Priority LOW 35
A hard-coded credentials issue was discovered on Mimosa Client Radios before 2.2.3, Mimosa Backhaul Radios before 2.2.3, and Mimosa Access Points before 2.2.3.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01118 · Published 2017-05-21 · No fix listed CWE-798
Priority LOW 34
An issue was discovered on Mimosa Client Radios before 2.2.3.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00819 · Published 2017-05-21 · No fix listed CWE-327
Priority LOW 29
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00905 · Published 2021-07-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 7 1 0 0
THREATIST.IORead the docs