CVE-2023-42135: Input Validation
PAX A920Pro/A50 devices with PayDroid8.1.0SagittariusV11.1.5020230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific partition.
The attacker must have physical USB access to the device in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42135?
CVE-2023-42135 has a high severity rating due to its potential for local code execution through parameter injection.
How do I fix CVE-2023-42135?
To fix CVE-2023-42135, update the PayDroid software on your PAX A920Pro or A50 device to a version later than PayDroid_8.1.0_Sagittarius_V11.1.50_20230614.
What devices are affected by CVE-2023-42135?
CVE-2023-42135 specifically affects PAX A920Pro and A50 devices running PayDroid versions up to and including 8.1.0_Sagittarius_V11.1.50_20230614.
Can CVE-2023-42135 be exploited remotely?
No, CVE-2023-42135 requires physical USB access to the affected device to execute the exploit.
What does CVE-2023-42135 allow an attacker to do?
CVE-2023-42135 allows an attacker to execute local code on the device by bypassing input validation during a specific partition flashing process.