CVE-2019-14713: Undefined Security Weakness

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...

PT-2020-9586

Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue allows for the installation of unsigned packages on the Verifone MX900 series Pinpad Payment Terminals. Recommendations: For version 30251000, ensure that...

PT-2020-9584

Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue is related to a race condition that allows for Role-Based Access Control RBAC bypass. This means that an attacker could potentially exploit this condition ...

PT-2020-9591

Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue allows for multiple arbitrary command injections, as demonstrated by the file manager. Recommendations: For Verifone MX900 series Pinpad Payment Terminals...

PT-2020-9590

Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue concerns Insecure Permissions, which can lead to arbitrary command injection and privilege escalation through svc netcontrol. Recommendations: For Verifone...

CVE-2019-14719: Improper Neutralization of Special Elements used in a Command

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager...

CVE-2019-14718: Incorrect Default Permissions

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svcnetcontrol arbitrary command injection and privilege escalation...