Paxtechnology Paydroid

9 CVEs affecting Paxtechnology Paydroid. Latest disclosed: 2024-01-15. Critical: 0, High: 4.

Top CVEs affecting Paxtechnology Paydroid
CVESeverityScorePublishedSummary
CVE-2023-42137High7.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malici…
CVE-2023-42136High7.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account pr…
CVE-2022-26582High7.82022-12-16PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command injection in systool client. The attack…
CVE-2023-4818High7.62024-01-15PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be u…
CVE-2023-42135Medium6.82024-01-15PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the in…
CVE-2023-42134Medium6.82024-01-15PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently local code…
CVE-2022-26581Medium6.82022-12-16PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged actions through the execution of specifi…
CVE-2022-26580Medium6.82022-12-16PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on selected binaries in the ADB daemon she…
CVE-2022-26579Medium6.02022-12-16PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must have shell a…