Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: PAX Technology POS terminals — ppn.paxengine.com/release/development Clear all filters
TI-2023-22505 CVE-2023-42137 · GHSA-w8g8-vhwr-gr27

Link following in PAX Technology POS terminals

Priority HIGH 67

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00466 Published 2024-01-15 No fix listed CWE-59
TI-2023-22504 CVE-2023-42136 · GHSA-qmr4-h7cx-9887

Command injection in PAX Technology POS terminals

Priority HIGH 69

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0048 Published 2024-01-15 No fix listed CWE-77