What is CVE-2023-42133?

CVE-2023-42133 is a medium-severity vulnerability in Pax Pos Terminals, classified under Incorrect Default Permissions. CVSS score: 6.7/10. Published 2024-10-11.

How severe is CVE-2023-42133?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Pax Pos Terminals

CVE-2023-42133

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was…

EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pax Pos Terminals — versions 0

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cvd@cert.pl (vendor-advisory)
cvd@cert.pl (technical-description)
cvd@cert.pl (third-party-advisory)
cvd@cert.pl (third-party-advisory)

Frequently asked questions

What is CVE-2023-42133?: CVE-2023-42133 is a medium-severity vulnerability in Pax Pos Terminals, classified under Incorrect Default Permissions. CVSS score: 6.7/10. Published 2024-10-11.
How severe is CVE-2023-42133?: Medium severity. CVSS v3 base score is 6.7 out of 10.