CVE-2023-42133: Incorrect Default Permissions

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version...

PAX Android based POS 安全漏洞

PAX Android based POS is a series of Android mobile payment terminals from China Paifu PAX. A security vulnerability exists in versions prior to PAX Android based POS 11.1.6120240226, which stems from incorrectly configured scripts that could lead to elevation of privilege...

PT-2024-1565

Name of the Vulnerable Software and Affected Versions PAX Android based POS devices with PayDroid versions 8.1.0 Sagittarius V11.1.45 20230314 or earlier Description The issue is related to the presence of undocumented configuration commands in the PayDroid operating system. Exploitation of this...

CVE-2023-42137: Improper Link Resolution Before File Access

PAX Android based POS devices with PayDroid8.1.0SagittariusV11.1.5020230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerability...