VULNERABILITY INTELLIGENCE

CVE-2020-28044

CVSS score6.8 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2020-11-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references