CVE-2023-42133

Medium

Description

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.

SeverityMedium

CVSS6.7

Exploit probability—

ProductPOS terminals

PublishedOct 11, 2024

First seenOct 11, 2024

Weakness typeCWE-276CWE-276

How to fix

Update

PAX POS terminals11.1.61_20240226 or later

Vendor advisories

ppn.paxengine.com/release/development?

Affected products

Product	Affected versions	Fixed in
PAX POS terminals	v < 11.1.61_20240226	11.1.61_20240226

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.