CVE-2023-42133CWE-276

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts

Medium · published October 11, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.

An attacker must have shell access with system account privileges in order to exploit this vulnerability.

A patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2024-10-11T12:01Z
EPSS history
Timeline
  • 11 OCT 12:01Z
    PAX Android based POS devices allow for escalation of privilege via improperly configured scripts
    cvelistv5