CVE-2023-42133: Medium severity pax paydroid vulnerability
PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.
An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version PayDroid8.1.0SagittariusV11.1.6120240226.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42133?
CVE-2023-42133 is considered a significant vulnerability due to its potential for privilege escalation.
How do I fix CVE-2023-42133?
To fix CVE-2023-42133, you should update to the firmware version PayDroid_8.1.0_Sagittarius_V11.1.61 or later.
Who is affected by CVE-2023-42133?
CVE-2023-42133 affects PAX Android based POS devices running versions below PayDroid_8.1.0_Sagittarius_V11.1.61.
What is needed to exploit CVE-2023-42133?
An attacker requires shell access with system account privileges to exploit CVE-2023-42133.
What kind of devices are impacted by CVE-2023-42133?
CVE-2023-42133 impacts PAX Android based point-of-sale (POS) devices.