PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must have shell access to the device and gain root privileges in order to exploit this vulnerability.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Paydroid | Paxtechnology | 7.1.1_virgo_v04.3.26t1_20210419 (including) | 7.1.1_virgo_v04.3.26t1_20210419 (including) |