Security Advisory

CVE-2023-42137

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-15 13:28:59
Last updated 2025-06-17 21:09:22
Assigner CERT-PL
State PUBLISHED

Description

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerability.