Vulnerability Details CVE-2020-25205
The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php. An unauthenticated attacker may set the contents of the /mnt/jffs2/banner.txt file, stored on the device's filesystem, to contain arbitrary JavaScript. The file contents are then used as part of a welcome/banner message presented to unauthenticated users who visit the login page for the web console. This vulnerability does not occur in the older 1.5.x firmware versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2020-25205
-
cpe:2.3:h:mimosa:b5:-
-
cpe:2.3:h:mimosa:b5c:-
-
cpe:2.3:h:mimosa:c5c:-
-
cpe:2.3:o:mimosa:b5_firmware:2.5.0.0
-
cpe:2.3:o:mimosa:b5_firmware:2.5.4.0
-
cpe:2.3:o:mimosa:b5_firmware:2.8.0.0
-
cpe:2.3:o:mimosa:b5_firmware:2.8.0.3
-
cpe:2.3:o:mimosa:b5c_firmware:2.5.0.0
-
cpe:2.3:o:mimosa:b5c_firmware:2.5.4.0
-
cpe:2.3:o:mimosa:b5c_firmware:2.8.0.0
-
cpe:2.3:o:mimosa:b5c_firmware:2.8.0.3
-
cpe:2.3:o:mimosa:c5c_firmware:2.5.0.0
-
cpe:2.3:o:mimosa:c5c_firmware:2.5.4.0
-
cpe:2.3:o:mimosa:c5c_firmware:2.8.0.0
-
cpe:2.3:o:mimosa:c5c_firmware:2.8.0.3