Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Paydroid HIGH 7.6
CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PA…

No fix yet
Fix from $1,950 2024-01-15
Paydroid HIGH 7.8
CVE-2023-42136

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system …

Fix: after 8.1.0_sagittarius_11.1.50_20230614
Fix from $1,950 2024-01-15
Paydroid HIGH 7.8
CVE-2023-42137

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by us…

Fix: after 8.1.0_sagittarius_11.1.50_20230614
Fix from $1,950 2024-01-15
Paydroid MEDIUM 6.8
CVE-2023-42134

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently …

Fix: after 8.1.0_sagittarius_v11.1.45_20230314
Fix from $1,600 2024-01-15
Paydroid MEDIUM 6.8
CVE-2023-42135

PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypass…

Fix: after 8.1.0_sagittarius_11.1.50_20230614
Fix from $1,600 2024-01-15
Pax A930 Firmware MEDIUM 6.8
CVE-2023-27198

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the exec service and including a s…

Mitigation only
Fix from $1,600 2023-07-05
Pax A930 Firmware MEDIUM 6.7
CVE-2023-27197

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a crafted binary leveraging an expor…

Mitigation only
Fix from $1,600 2023-07-05
Pax A930 Firmware MEDIUM 6.7
CVE-2023-27199

PAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a malicious shared library and use LD_PRELOAD to bypass author…

Mitigation only
Fix from $1,600 2023-07-05
Paydroid HIGH 7.8
CVE-2022-26582

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command injection in systool client. …

Mitigation only
Fix from $1,950 2022-12-16
Paydroid MEDIUM 6.8
CVE-2022-26580

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on selected binaries in the ADB …

Mitigation only
Fix from $1,600 2022-12-16
Paydroid MEDIUM 6.8
CVE-2022-26581

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged actions through the execution …

Mitigation only
Fix from $1,600 2022-12-16
Paydroid MEDIUM 6.0
CVE-2022-26579

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must ha…

Mitigation only
Fix from $1,600 2022-12-16
Paxstore HIGH 8.2
CVE-2020-36128

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (cal…

Fix: after 7.0.8_20200511171508
Fix from $1,950 2021-05-07
Paxstore HIGH 8.1
CVE-2020-36126

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTOR…

Fix: after 7.0.8_20200511171508
Fix from $1,950 2021-05-07
Paxstore HIGH 7.1
CVE-2020-36125

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations c…

Fix: after 7.0.8_20200511171508
Fix from $1,950 2021-05-07
Paxstore MEDIUM 6.5
CVE-2020-36124

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authenticated attacker can compromise …

Fix: after 7.0.8_20200511171508
Fix from $1,600 2021-05-07
Paxstore MEDIUM 6.5
CVE-2020-36127

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through the PUK signature functionali…

Fix: after 7.0.8_20200511171508
Fix from $1,600 2021-05-07