CVE-2020-25206
published 2021-07-20CVE-2020-25206: The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats…
PriorityP179high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
5.31%
91.6th percentile
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mimosa | b5_firmware | 1.5.2 – 2.8.0.3 | — |
| mimosa | b5c_firmware | >= 1.5.2 < 2.8.1.0 | 2.8.1.0 |
| mimosa | c5c_firmware | >= 1.5.2 < 2.8.1.0 | 2.8.1.0 |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vulncheck7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g46h-cqxg-94f4: The web console for Mimosa B5, B5c, and C5x firmware through 2
ghsa_unreviewed·2022-05-24
CVE-2020-25206 [HIGH] CWE-78 GHSA-g46h-cqxg-94f4: The web console for Mimosa B5, B5c, and C5x firmware through 2
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.
VulnCheck
mimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulncheck·2020·CVSS 7.2
CVE-2020-25206 [HIGH] mimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
mimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.
Affected: mimosa b5_firmware
Required Action: Apply remediations or mitigations per vend
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cwe.mitre.org/data/definitions/78.htmlhttps://labs.f-secure.com/advisories/https://labs.f-secure.com/advisories/mimosa-ptp-devices-multiple-vulnerabilities/https://cwe.mitre.org/data/definitions/78.htmlhttps://labs.f-secure.com/advisories/https://labs.f-secure.com/advisories/mimosa-ptp-devices-multiple-vulnerabilities/
2021-07-20
Published
Exploited in the wild