Vulnerabilities

TI-2020-15447 CVE-2020-25206 · GHSA-g46h-cqxg-94f4

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated…

MEDIUM 40

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05312 Published 2021-07-20 No fix listed CWE-78

TI-2020-15446 CVE-2020-25205 · GHSA-w338-c5qq-hv3p

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to…

LOW 29

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2021-07-20 No fix listed CWE-79

Vulnerabilities

Filters

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated…

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to…