CVE-2020-25185

Paradox IP150 (LAN module) is affected. CVE-2020-25185 covers five post-authentication buffer overflows in IP150 firmware 5.02.09 that may allow a logged-in attacker to remotely execute arbitrary code. The related CVE-2020-25189 covers three stack-based buffer overflows with a CVSS v3 base score ...

CVE-2020-25189

CVE-2020-25189 affects Paradox IP150 IP150 LAN module (firmware 5.02.09 included). The vulnerability is three stack-based buffer overflows that could permit an unauthenticated attacker to remotely execute arbitrary code. CVSS v3 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Remediation...