CVE-2020-25189
Description
The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker to remotely execute arbitrary code on the IP150 (firmware versions 5.02.09).
References
Third Party Advisory
US Government Resource
CvssV3 impact
BaseSeverity
CRITICAL
ConfidentialityImpact
HIGH
AttackComplexity
LOW
Scope
UNCHANGED
AttackVector
NETWORK
AvailabilityImpact
HIGH
IntegrityImpact
HIGH
PrivilegesRequired
NONE
BaseScore
9.8
VectorString
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version
3.1
UserInteraction
NONE
CvssV2 impact
AccessComplexity
LOW
ConfidentialityImpact
PARTIAL
AvailabilityImpact
PARTIAL
IntegrityImpact
PARTIAL
BaseScore
7.5
VectorString
AV:N/AC:L/Au:N/C:P/I:P/A:P
Version
2.0
AccessVector
NETWORK
Authentication
NONE