{"id":"CVE-2020-25206","aliases":["EUVD-2020-17896","GHSA-g46h-cqxg-94f4"],"status":"published","title":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command...","description":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.05312,"percentile":0.92662,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2021-07-20T18:45:29Z","modified":"2026-06-17T03:06:34Z","products":[{"vendor":"mimosa","product":"b5_firmware"},{"vendor":"mimosa","product":"b5c_firmware"},{"vendor":"mimosa","product":"c5c_firmware"}],"references":[{"url":"https://cwe.mitre.org/data/definitions/78.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://labs.f-secure.com/advisories/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://labs.f-secure.com/advisories/mimosa-ptp-devices-multiple-vulnerabilities/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25206"},{"url":"https://github.com/advisories/GHSA-g46h-cqxg-94f4"}],"sources":{"cve":[{"id":"CVE-2020-25206","description":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.","status":"published","published":"2021-07-20T18:45:29Z","modified":"2024-08-04T15:33:04.373Z","updated_at":"2026-11-02T14:35:48.854892Z"}],"euvd":[{"id":"EUVD-2020-17896","description":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.","status":"published","published":"2021-07-20T18:45:29Z","modified":"2024-08-04T15:33:04Z","updated_at":"2026-11-03T03:07:18.192905Z"}],"ghsa":[{"id":"GHSA-g46h-cqxg-94f4","title":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command...","description":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.","status":"published","published":"2022-05-24T19:08:27Z","modified":"2023-01-27T05:03:21Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:42:13.826528Z"}],"nvd":[{"id":"CVE-2020-25206","description":"The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted POST requests to the affected endpoints (/core/api/calls/Throughput.php, /core/api/calls/WANStats.php, /core/api/calls/PhyStats.php, /core/api/calls/QosStats.php). This results in the complete takeover of the vulnerable device. This vulnerability does not occur in the older 1.5.x firmware versions.","status":"published","published":"2021-07-20T19:15:09.6Z","modified":"2026-06-17T03:06:34.89Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:44.292752Z"}]}}