PatchTheCVEpaxtechnology vulnerabilities
Recent CVEs affecting paxtechnology products. 5 tracked.
paxtechnology has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-01-15. Highest priority: CVE-2023-4818 (score 45/100).
- CVE-2023-4818 HIGH 7.6 MITIGATE PAX A920 device allows to downgrade bootloader due to a bug in its version check
- CVE-2023-42137 HIGH 7.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for comma
- CVE-2023-42136 HIGH 7.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execu
- CVE-2023-42135 MEDIUM 6.8 UPGRADE PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code exec
- CVE-2023-42134 MEDIUM 6.8 UPGRADE PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signe
FAQ
How do I fix paxtechnology vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is paxtechnology being exploited right now?
None of the tracked paxtechnology CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which paxtechnology CVE should I patch first?
CVE-2023-4818 currently ranks highest (45/100): PAX A920 device allows to downgrade bootloader due to a bug in its version check.