Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
References
Link | Resource |
---|---|
https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-28/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Information
Published : 2020-10-22 22:15
Updated : 2020-10-30 14:25
NVD link : CVE-2019-14715
Mitre link : CVE-2019-14715
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
verifone
- vx_820_firmware
- p400
- vx_820
- p200_firmware
- p400_firmware
- vx_805
- vx_805_firmware
- p200