CVE-2020-25185
Description
The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitrary code on the IP150 (firmware versions 5.02.09).
References
Third Party Advisory
US Government Resource
CvssV3 impact
BaseSeverity
HIGH
ConfidentialityImpact
HIGH
AttackComplexity
LOW
Scope
UNCHANGED
AttackVector
NETWORK
AvailabilityImpact
HIGH
IntegrityImpact
HIGH
PrivilegesRequired
LOW
BaseScore
8.8
VectorString
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version
3.1
UserInteraction
NONE
CvssV2 impact
AccessComplexity
LOW
ConfidentialityImpact
PARTIAL
AvailabilityImpact
PARTIAL
IntegrityImpact
PARTIAL
BaseScore
6.5
VectorString
AV:N/AC:L/Au:S/C:P/I:P/A:P
Version
2.0
AccessVector
NETWORK
Authentication
SINGLE