CVE-2022-26579: Medium severity paxtechnology pax a930 firmware vulnerability
PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow a root privileged attacker to install unsigned packages. The attacker must have shell access to the device and gain root privileges in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-26579?
CVE-2022-26579 is a vulnerability that allows a root privileged attacker to install unsigned packages on PAX A930 devices with PayDroid 7.1.1 Virgo V04.3.26T1_20210419.
How severe is CVE-2022-26579?
CVE-2022-26579 has a severity level of medium.
How does CVE-2022-26579 work?
CVE-2022-26579 requires the attacker to have shell access to the device and gain root privileges in order to exploit the vulnerability.
Which software versions are affected by CVE-2022-26579?
PAX A930 devices with PayDroid 7.1.1 Virgo V04.3.26T1_20210419 are affected by CVE-2022-26579.
How can I fix CVE-2022-26579?
To fix CVE-2022-26579, it is recommended to update to a patched version of PayDroid that addresses the vulnerability.