CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-03-21

Last modified

2025-02-28

Weaknesses

CWE-94

Affected products

• Ipr512 Firmware (Paradox)

References

• http://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html
• https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512
• https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512