Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability.
CVSS Information
N/A
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
PAX Technology A920 注入漏洞
Vulnerability Description
PAX Technology A920是中国百富环球（PAX Technology）公司的一款 Android 移动支付终端。 PAX Technology A920 存在安全漏洞，该漏洞源于版本检查错误，攻击者利用该漏洞可能引导加载程序降级到易受攻击的版本，从而导致本地代码执行。
CVSS Information
N/A
Vulnerability Type
N/A