Lucene search

[email protected]NVD:CVE-2019-14713

HistoryOct 23, 2020 - 5:15 a.m.

CVE-2019-14713

2020-10-2305:15:12

[email protected]

web.nvd.nist.gov

verifone

mx900 series

pinpad

payment terminals

os 30251000

installation

unsigned packages

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

Percentile

12.6%

JSON

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.

Affected configurations

Nvd

Node

verifonemx900_firmwareMatch30251000

AND

verifonemx900Match-

VendorProductVersionCPE
verifonemx900_firmware30251000cpe:2.3:o:verifone:mx900_firmware:30251000:*:*:*:*:*:*:*
verifonemx900-cpe:2.3:h:verifone:mx900:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
verifone	mx900_firmware	30251000	cpe:2.3:o:verifone:mx900_firmware:30251000:::::::*
verifone	mx900	-	cpe:2.3:h:verifone:mx900:-:::::::*

References

www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-21/

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2019-14713

cvelist1 ptsecurity1 prion1 cve1