Vulnerability Description
PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://blog.stmcyber.com/pax-pos-cves-2023/
- https://cert.pl/en/posts/2024/10/CVE-2023-42133
- https://cert.pl/posts/2024/10/CVE-2023-42133
- https://ppn.paxengine.com/release/development?
FAQ
What is CVE-2023-42133?
CVE-2023-42133 is a vulnerability with a CVSS score of 6.7 (MEDIUM). PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerabi...
How severe is CVE-2023-42133?
CVE-2023-42133 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-42133?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.