2 lines
3.8 KiB
JSON
2 lines
3.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"A920","vendor":"PAX Technology","versions":[{"lessThan":"A920_AP_Boot_Release_V5.14","status":"affected","version":"0","versionType":"custom"}]}],"source":"cvd@cert.pl"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paxtechnology:paydroid:7.1.2_aquarius_11.1.50_20230614:*:*:*:*:*:*:*","matchCriteriaId":"034C08E1-1DEB-43D2-A38A-736E1FEDE45C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:paxtechnology:a920:-:*:*:*:*:*:*:*","matchCriteriaId":"D351F870-D43F-48B4-B2AC-0FDDD7B82ED4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. \n\n\n\n\nThe attacker must have physical USB access to the device in order to exploit this vulnerability."},{"lang":"es","value":"El dispositivo PAX A920 permite degradar el gestor de arranque debido a un error en la verificación de versión. La firma está correctamente comprobada y sólo se puede utilizar el gestor de arranque firmado por PAX. El atacante debe tener acceso USB físico al dispositivo para poder aprovechar esta vulnerabilidad."}],"id":"CVE-2023-4818","lastModified":"2026-06-17T06:38:40.570","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":6.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4818","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-06-17T13:36:16.229654Z","version":"2.0.3"}}]},"published":"2024-01-15T14:15:25.180","references":[{"source":"cvd@cert.pl","tags":["Exploit","Third Party Advisory"],"url":"https://blog.stmcyber.com/pax-pos-cves-2023/"},{"source":"cvd@cert.pl","tags":["Third Party Advisory"],"url":"https://cert.pl/en/posts/2024/01/CVE-2023-4818/"},{"source":"cvd@cert.pl","tags":["Third Party Advisory"],"url":"https://cert.pl/posts/2024/01/CVE-2023-4818/"},{"source":"cvd@cert.pl","tags":["Permissions Required"],"url":"https://ppn.paxengine.com/release/development"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://blog.stmcyber.com/pax-pos-cves-2023/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.pl/en/posts/2024/01/CVE-2023-4818/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.pl/posts/2024/01/CVE-2023-4818/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"],"url":"https://ppn.paxengine.com/release/development"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-74"}],"source":"cvd@cert.pl","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-74"}],"source":"nvd@nist.gov","type":"Primary"}]}
|