Parameter Injection Vulnerability in PAX A920Pro and A50 Devices
CVE-2023-42135

6.8MEDIUM

Key Information:

Vendor: Pax Technology
Status: A920 Pro; A50
Vendor: CVE Published:; 15 January 2024

🔔 Create Pax Technology Vulnerability Alert

What is CVE-2023-42135?

PAX A920Pro and A50 devices running PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier are susceptible to a parameter injection flaw that allows local code execution. Attackers with physical USB access can exploit this vulnerability by bypassing input validation when flashing a specific partition. This could potentially lead to unauthorized control and manipulation of the device's functionality, posing a significant risk to the integrity and security of transactions processed on these devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch