{"id":"CVE-2023-42133","state":"PUBLISHED","title":"PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.","description":"PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.\n\nAn attacker must have shell access with system account privileges in order to exploit this vulnerability.\nA patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226.","publishedAt":"2024-10-11T12:01:13.299Z","updatedAt":"2024-10-11T14:42:04.239Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","source":"CERT-PL"},"assigner":"CERT-PL","products":["PAX POS terminals"],"affected":[{"vendor":"PAX","product":"POS terminals","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.61_20240226","versionType":"custom"}],"platforms":["Android"]}],"references":["https://ppn.paxengine.com/release/development?","https://blog.stmcyber.com/pax-pos-cves-2023/","https://cert.pl/en/posts/2024/10/CVE-2023-42133","https://cert.pl/posts/2024/10/CVE-2023-42133"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/42xxx/CVE-2023-42133.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-42133","state":"PUBLISHED","datePublished":"2024-10-11T12:01:13.299Z","dateUpdated":"2024-10-11T14:42:04.239Z","assignerShortName":"CERT-PL","assignerOrgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","dateReserved":"2023-09-07T13:17:57.371Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"PAX Android based POS devices allow for escalation of privilege via improperly configured scripts.\n\nAn attacker must have shell access with system account privileges in order to exploit this vulnerability.\nA patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226."}],"affected":[{"vendor":"PAX","product":"POS terminals","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"11.1.61_20240226","versionType":"custom"}],"platforms":["Android"]}],"references":[{"url":"https://ppn.paxengine.com/release/development?","tags":["vendor-advisory"]},{"url":"https://blog.stmcyber.com/pax-pos-cves-2023/","tags":["technical-description"]},{"url":"https://cert.pl/en/posts/2024/10/CVE-2023-42133","tags":["third-party-advisory"]},{"url":"https://cert.pl/posts/2024/10/CVE-2023-42133","tags":["third-party-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"CWE-276 Incorrect Default Permissions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERT-PL","orgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","dateUpdated":"2024-10-11T12:01:13.299Z"},"datePublic":"2024-10-11T10:00:00.000Z","impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"paxtechnology","product":"paydroid","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"11.1.61_20240226","versionType":"custom"}],"cpes":["cpe:2.3:o:paxtechnology:paydroid:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-11T14:36:06.943195Z","id":"CVE-2023-42133","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-11T14:42:04.239Z"}}]}}}