Vulnerabilities

TI-2019-10938 CVE-2019-14718 · GHSA-9j72-3m9p-jcqw

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure…

LOW 32

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01193 Published 2020-10-23 No fix listed CWE-276

TI-2019-10939 CVE-2019-14719 · GHSA-q7qq-wmm7-38v4

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary…

LOW 36

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00899 Published 2020-10-23 No fix listed CWE-77

TI-2019-10934 CVE-2019-14713 · GHSA-h8mv-4m6x-fp87

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.

LOW 25

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00301 Published 2020-10-23 No fix listed

TI-2019-10932 CVE-2019-14711 · GHSA-fwwq-fjfj-33cg

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.

LOW 30

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00212 Published 2020-10-23 No fix listed CWE-362

Vulnerabilities

Filters

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure…

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary…

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.