Lucene search
Sba-researchCVELIST:CVE-2024-5676HistoryJun 19, 2024 - 9:47 a.m.
CVE-2024-5676 Paradox IP150 Internet Module Cross-Site Request Forgery
2024-06-1909:47:38
CWE-352
sba-research
www.cve.org
3
paradox ip150
internet module
csrf
vulnerability
version 1.40.00
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
15.7%
The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a lack of countermeasures and the use of the HTTP method GET to introduce changes in the system.
CNA Affected
[
{
"defaultStatus": "unknown",
"product": "IP150 Internet Module",
"vendor": "Paradox Security Systems (Bahamas) Ltd.",
"versions": [
{
"status": "affected",
"version": "1.40.00",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2024-5676
2024-06-19 10:15:10
nvd
nvd
CVE-2024-5676
2024-06-19 10:15:10
packetstorm
packetstorm
Paradox IP150 Internet Module 1.40.00 Cross Site Request Forgery
2024-06-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-5676 Paradox IP150 Internet Module Cross-Site Request Forgery
2024-06-19 09:47:38
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
15.7%
Related for CVELIST:CVE-2024-5676