CVE-2023-26980

ALTO 7.0CVE-2023-26980 · Published 14/04/2023 · updated 17/06/2026

In breve

CVE-2023-26980 è una vulnerabilità ALTO (CVSS 7.0) che riguarda paydroid (pax).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
paydroid pax	`= 8.1`	No fix yet

Description

PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher will be loaded before any user applications.

References

docs.google.com/document/d/189b1494s8RF8ksaOijKhKb-3B8gj3pLUmgn0dqg-jqs/edit · Mailing List
drive.google.com/drive/u/0/folders/14X-XTYhkiaIVBS3zf68VigG4-imbKEuV · Exploit
uploads.strikinglycdn.com/files/f1d54bf4-3803-480c-b4d3-0943f7dac76e/A920_EN_20200605.pdf · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free