CVE-2023-42137

Published: Jan 15, 2024Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerability.

Affected (1)

Products: Paxtechnology: Paydroid

1 product

Configuration A

1 platform

Running on/with	Platform Versions
Paxtechnology A50	All versions

Configuration B

1 platform

Running on/with	Platform Versions
Paxtechnology A6650	All versions

Configuration C

1 platform

Running on/with	Platform Versions
Paxtechnology A800	All versions

Configuration D

1 platform

Running on/with	Platform Versions
Paxtechnology A77	All versions

Configuration E

1 platform

Running on/with	Platform Versions
Paxtechnology A920	All versions

Configuration F

1 platform

Running on/with	Platform Versions
Paxtechnology A920 Pro	All versions

Configuration G

1 platform

Running on/with	Platform Versions
Paxtechnology A920 Max	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Paxtechnology Paydroid	Up to 8.1.0_sagittarius_11.1.50_20230614

Running on/with	Platform Versions
Paxtechnology D190	All versions

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (8)

https://blog.stmcyber.com/pax-pos-cves-2023/

Source: cvd@cert.pl

ExploitThird Party Advisory

https://cert.pl/en/posts/2024/01/CVE-2023-4818/

Source: cvd@cert.pl

Third Party Advisory

https://cert.pl/posts/2024/01/CVE-2023-4818/

Source: cvd@cert.pl

Third Party Advisory

https://ppn.paxengine.com/release/development

Source: cvd@cert.pl

Permissions Required

https://blog.stmcyber.com/pax-pos-cves-2023/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://cert.pl/en/posts/2024/01/CVE-2023-4818/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert.pl/posts/2024/01/CVE-2023-4818/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://ppn.paxengine.com/release/development

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.