CVE-2023-3656

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network...

CVE-2023-3655

The CVE-2023-3655 entry concerns cashIT! - serving solutions on devices running version 03.A06rks 2023.02.37. Connected PT-2023-25621 details indicate the vulnerability allows leakage of the database (including system settings and user accounts) via an HTTP endpoint exposed to the network. No exp...

CVE-2023-3656

CVE-2023-3656 affects cashIT! – serving solutions from PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH. The vulnerability is an unauthenticated remote code execution triggered by an exposed HTTP endpoint. Affected versions are up to 03.A06rks 2023.02.37. The CVSS v3.1 score is 9.8 (CRITICAL), wi...

PT-2023-25619

Name of the Vulnerable Software and Affected Versions cashIT! - serving solutions versions 03.A06rks 2023.02.37 and earlier Description The issue is related to an origin bypass via the host header in an HTTP request. This can be triggered by an HTTP endpoint exposed to the network. Recommendation...