A920 vulnerabilities

1 known vulnerability in A920 from PAX Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  A920: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-4818Jan 15, 2024PAX Technology

  PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability.