6.7

CVE-2023-27197

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paxtechnology ≫ Pax A930 Firmware Versionpaydroid_7.1.1_virgo_v04.5.02_20220722
   Paxtechnology ≫ Pax A930 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://github.com/wr3nchsr/PAX-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27197.md
Third Party Advisory
https://wr3nchsr.github.io/pax-paydroid-vulnerabilities-advisory-2023/