Incorrect default permissions in PAX POS terminals
Priority LOW 31CWE-276Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00234 14th percentileScored 2026-11-07
Fix Fixed POS terminals (PAX): 11.1.61_20240226
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| PAX | POS terminals | before 11.1.61_20240226 | 11.1.61_20240226 | Patch available | CNA |
- POS terminals VendorPAX Affected before 11.1.61_20240226 Fixed in 11.1.61_20240226 Patch available CNA
CPE names CISA-ADP · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:paxtechnology:paydroid:*:*:*:*:*:*:*:* | — | — | PAX Technology |
- cpe:2.3:o:paxtechnology:paydroid:*:*:*:*:*:*:*:* Versions — — ·PAX Technology
Remediation
- Fix · CNA POS terminals (PAX) Fixed in 11.1.61_20240226
Timeline
- 2026-10-02 Threatist record created from CVE-2023-42133
- 2026-10-03 Alias added: GHSA-xr7h-8r7p-xpv9
References
More PAX vulnerabilities
- TI-2020-17072 An issue was discovered in ProlinOS through 2.4.161.8859R. CVSS 3.1HIGH 7.8
- TI-2020-17071 An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. CVSS 3.1HIGH 7.8
- TI-2023-11855 PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability… CVSS 3.1HIGH 7.0
- TI-2020-17070 An attacker with physical access to a PAX Point Of Sale device with ProlinOS through… CVSS 3.1MEDIUM 6.8
Sources
- CVE-2023-42133 · CVE Program
- CVE-2023-42133 · NVD
- FIRST EPSS
- GHSA-xr7h-8r7p-xpv9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences