Race Condition Vulnerability in PAX A920 Pro Payment Device by PAX Technology

CVE-2023-26980

What is CVE-2023-26980?

The PAX A920 Pro payment device is susceptible to a Race Condition vulnerability that can potentially allow an attack to bypass the standard payment software, initiating the boot sequence directly into the Android operating system. Despite vendor assertions that the practical exploitation of this vulnerability is unlikely, as the home launcher would typically intercept before user applications are engaged, the risk remains a topic of concern in ensuring robust security protocols for payment systems.

References