B5 Firmware Security Vulnerabilities

CVE-2022-36477

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36478

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36475

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36471

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36473

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36469

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36474

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36472

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36468

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36467

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2022-36470

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function...

CVE-2020-25206

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending crafted....

CVE-2020-25205

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php. An unauthenticated attacker may set the contents of the /mnt/jffs2/banner.txt file, stored on the device's filesystem, to contain...

CVE-2016-8368

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to...

CVE-2016-8370

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q...