Skip to content
OpenAdvisories
Critical ICSA-20-324-02 2 CVEs

Paradox IP150 (Update A)

Published Nov 17, 2020 · Updated Sep 19, 2022 · Revision 3

Vendor: Paradox Product: IP150

Summary

Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code, which may result in the termination of the physical security system.

Vulnerabilities 2

  • Unscored —
    CVE-2020-25185

    The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to re…

  • Unscored —
    CVE-2020-25189

    The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker t…

Revision history

  1. #3

    Paradox IP150 (Update B)

  2. #2

    Paradox IP150 (Update A)

  3. #1

    ICSA-20-324-02 Paradox IP150

References