Command Execution Vulnerability in PAX Android Based POS Devices
CVE-2023-42137

7.8HIGH

Key Information:

Vendor: Pax Technology
Status: Pos Terminals
Vendor: CVE Published:; 15 January 2024

🔔 Create Pax Technology Vulnerability Alert

What is CVE-2023-42137?

A critical security concern has been identified in PAX Android based Point of Sale (POS) devices, specifically those running the software version PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier. Attackers with shell access to the device can exploit this vulnerability to execute commands with high privileges. This flaw arises from improper handling of symlinks, potentially allowing malicious actors to manipulate system processes and access sensitive data. Organizations utilizing these devices are urged to review their security practices and apply appropriate mitigations to protect against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch