CVE-2023-42134: Medium severity pax paydroid vulnerability
PAX Android based POS devices with PayDroid8.1.0SagittariusV11.1.4520230314 or earlier can allow the signed partition overwrite and subsequently local code execution via hidden command.
The attacker must have physical USB access to the device in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42134?
CVE-2023-42134 is a vulnerability that allows signed partition overwrite and local code execution on specified PAX Android POS devices.
How do I fix CVE-2023-42134?
To mitigate CVE-2023-42134, ensure that your PAX Android POS device is upgraded to a version of PayDroid greater than 8.1.0_Sagittarius_V11.1.45_20230314.
What devices are affected by CVE-2023-42134?
CVE-2023-42134 affects PAX Android POS devices running PayDroid versions up to and including 8.1.0_Sagittarius_V11.1.45_20230314.
Can CVE-2023-42134 be exploited remotely?
No, CVE-2023-42134 requires physical USB access to the device for exploitation.
What kind of access does an attacker need to exploit CVE-2023-42134?
An attacker must have physical USB access to the PAX Android POS device to exploit CVE-2023-42134.