CVE-2020-28044

An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and…

published November 1, 2020

CVSS
—
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Published
2020-11-01T17:39Z
EPSS history
Timeline
  • 01 NOV 17:39Z
    An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and…
    cvelistv5