Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-5676

Paradox IP150 Internet Module Cross-Site Request Forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sba-research

Description

The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a lack of countermeasures and the use of the HTTP method `GET` to introduce changes in the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Paradox Security Systems (Bahamas) Ltd. IP150 Internet Module

Default version status: unknown

  • 1.40.00affected

References