paydroid vulnerabilities and fixes

Recent CVEs affecting paydroid, with upgrade or downgrade steps. 5 tracked.

paydroid has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-01-15. Highest priority: CVE-2023-4818 (score 45/100).

• CVE-2023-4818 HIGH 7.6 MITIGATE PAX A920 device allows to downgrade bootloader due to a bug in its version check
• CVE-2023-42137 HIGH 7.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for comma
• CVE-2023-42136 HIGH 7.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execu
• CVE-2023-42135 MEDIUM 6.8 UPGRADE PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code exec
• CVE-2023-42134 MEDIUM 6.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signe

FAQ

How do I fix paydroid vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is paydroid being exploited right now?

None of the tracked paydroid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which paydroid CVE should I patch first?

CVE-2023-4818 currently ranks highest (45/100): PAX A920 device allows to downgrade bootloader due to a bug in its version check.

RSS feed for paydroid · ← Back to latest CVEs