Описание
An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.161.8859r (включая)
cpe:2.3:o:pax:prolinos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00094
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276
Связанные уязвимости
github
больше 3 лет назад
An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions.
EPSS
Процентиль: 27%
0.00094
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276