CVE-2023-42133
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Oct 11, 2024
Updated: Oct 15, 2024
CWE ID 276
Summary
CVE-2023-42133 is a privilege escalation vulnerability affecting PAX Android-based Point-of-Sale (POS) devices. The issue arises due to improperly configured scripts, allowing an attacker with system account privileges to escalate their access. To exploit this vulnerability, the attacker must already have shell access. A patch addressing this issue is available in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.