CVE-2023-27197
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jul 5, 2023
Updated: Apr 23, 2024
Summary
CVE-2023-27197 is a vulnerability affecting the PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 software. An attacker can exploit this issue by running a specially crafted binary, which leverages an exported function from a shared library. To successfully exploit this vulnerability, the attacker must first gain shell access to the device. This vulnerability grants the attacker root access, posing a significant risk to the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Pax Technology Inc.