POS terminals vulnerabilities

2 known vulnerabilities in POS terminals from PAX Technology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  POS terminals: Improper Link Resolution Before File Access

  CVE-2023-42137Jan 15, 2024PAX Technology

  PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerabilit

• 7.8 High severity

  POS terminals: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-42136Jan 15, 2024PAX Technology

  PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word. The attacker must have shell access to the