Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmr4-h7cx-9887

Опубликовано: 15 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word.

The attacker must have shell access to the device in order to exploit this vulnerability.

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word.

The attacker must have shell access to the device in order to exploit this vulnerability.

EPSS

Процентиль: 23%
0.00078
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
CWE-74
CWE-77

Связанные уязвимости

CVSS3: 7.8
nvd
около 2 лет назад

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word. The attacker must have shell access to the device in order to exploit this vulnerability.

CVSS3: 8.8
fstec
около 2 лет назад

Уязвимость операционной системы PayDroid, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 23%
0.00078
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
CWE-74
CWE-77