Description
The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a lack of countermeasures and the use of the HTTP method `GET` to introduce changes in the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Paradox Security Systems (Bahamas) | IP150 Internet Module | 1.40.00 | — |