Medium severity6.8NVD Advisory· Published Jul 5, 2023· Updated Jun 17, 2026

CVE-2023-27198

Description

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PAX/A930description
PAX/A930llm-fuzzy
Range: PayDroid_7.1.1_Virgo_V04.5.02_20220722
Paxtechnology/Pax A930 Firmware
cpe:2.3:o:paxtechnology:pax_a930_firmware:paydroid_7.1.1_virgo_v04.5.02_20220722:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/wr3nchsr/PAX-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27198.mdnvdThird Party Advisory
wr3nchsr.github.io/pax-paydroid-vulnerabilities-advisory-2023/nvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000