CVE-2020-28045

CVE-2020-28045 affects ProlinOS up to 2.4.161.8859R. Root cause: shared libraries are not required to be signed and are not verified, allowing an attacker with local access to load a crafted shared object via LD_PRELOAD, bypassing kernel ELF verification and executing unsigned code. This creates ...

CVE-2020-28046

ProlinOS up to version 2.4.161.8859R is affected. A local attacker with normal user (MAINAPP) privileges can escalate to root by abusing a setuid xtables-multi binary and using the ip6tables --modprobe switch. The connected records confirm the root-cause is the setuid installation and ip6tables m...

CVE-2020-28044

The CVE-2020-28044 entry applies to a PAX Point Of Sale device running ProlinOS up to 2.4.161.8859R. With physical access, an attacker can boot the device into management mode, enable the XCB service, and gain MAINAPP-privileged access to list, read, create, and overwrite files. The description d...