Browse CVEs

HIGH 7.6 CVE-2023-4818 PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PA… Paydroid No fix yet Fix from $1,9502024-01-15 HIGH 7.8 CVE-2023-42136 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system … Paydroid after 8.1.0_sagittarius_11.1.50_20230614 Fix from $1,9502024-01-15 HIGH 7.8 CVE-2023-42137 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by us… Paydroid after 8.1.0_sagittarius_11.1.50_20230614 Fix from $1,9502024-01-15 MEDIUM 6.8 CVE-2023-42134 PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently … Paydroid after 8.1.0_sagittarius_v11.1.45_20230314 Fix from $1,6002024-01-15 MEDIUM 6.8 CVE-2023-42135 PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypass… Paydroid after 8.1.0_sagittarius_11.1.50_20230614 Fix from $1,6002024-01-15 MEDIUM 6.8 CVE-2023-27198 PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the exec service and including a s… Pax A930 Firmware Mitigation only Fix from $1,6002023-07-05 MEDIUM 6.7 CVE-2023-27197 PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a crafted binary leveraging an expor… Pax A930 Firmware Mitigation only Fix from $1,6002023-07-05 MEDIUM 6.7 CVE-2023-27199 PAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a malicious shared library and use LD_PRELOAD to bypass author… Pax A930 Firmware Mitigation only Fix from $1,6002023-07-05 HIGH 7.8 CVE-2022-26582 PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command injection in systool client. … Paydroid Mitigation only Fix from $1,9502022-12-16 MEDIUM 6.8 CVE-2022-26580 PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on selected binaries in the ADB … Paydroid Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.8 CVE-2022-26581 PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged actions through the execution … Paydroid Mitigation only Fix from $1,6002022-12-16 MEDIUM 6.0 CVE-2022-26579 PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must ha… Paydroid Mitigation only Fix from $1,6002022-12-16 HIGH 8.2 CVE-2020-36128 Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (cal… Paxstore after 7.0.8_20200511171508 Fix from $1,9502021-05-07 HIGH 8.1 CVE-2020-36126 Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTOR… Paxstore after 7.0.8_20200511171508 Fix from $1,9502021-05-07 HIGH 7.1 CVE-2020-36125 Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations c… Paxstore after 7.0.8_20200511171508 Fix from $1,9502021-05-07 MEDIUM 6.5 CVE-2020-36124 Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authenticated attacker can compromise … Paxstore after 7.0.8_20200511171508 Fix from $1,6002021-05-07 MEDIUM 6.5 CVE-2020-36127 Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through the PUK signature functionali… Paxstore after 7.0.8_20200511171508 Fix from $1,6002021-05-07