CVE-2020-25185

Paradox IP150 (LAN module) is affected. CVE-2020-25185 covers five post-authentication buffer overflows in IP150 firmware 5.02.09 that may allow a logged-in attacker to remotely execute arbitrary code. The related CVE-2020-25189 covers three stack-based buffer overflows with a CVSS v3 base score ...

CVE-2020-25185

The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitrary code on the IP150 firmware versions 5.02.09...

Paradox IP150 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Paradox Equipment: IP150 Vulnerabilities: Stack-based Buffer Overflow, Classic Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...