Vendors / Verifone Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now Verifone records in CISA KEV No Verifone vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00899 · Published 2020-10-23 · No fix listed CWE-77
Priority LOW 32
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.01193 · Published 2020-10-23 · No fix listed CWE-276
Priority LOW 30
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2020-10-23 · No fix listed CWE-362
Priority LOW 25
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-10-23 · No fix listed
Open these records in search → All records by CVSS severity
0 7 4 0 0
THREATIST.IORead the docs