PT-2020-24: Integrity and origin control bypass (S1G file generation)

HIGH
(8.2) CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
THREATSCAPE

Analytics articles

What are the security threats on your network?

Check your traffic-for free
Request pilot

Vulnerable software

Verifone
VerixV

Severity level

Severity level: High
Impact: Integrity and origin control bypass (S1G file generation)
Access Vector: Local

CVSS v3.1:
Base Score: 8.2
Vector: (AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)

CVE-2019-14712

Advisory status

01.10.2019 - Vendor gets vulnerability details
01.08.2020 - Vendor releases fixed version and details

Credits

The vulnerability was detected by Alex Stennikov, Dmitry Sklyarov, Egor Zaitsev, Positive Research Center (Positive Technologies Company)

Identifier:
CVE-2019-14712
Vendor:
Verifone
Vulnerable product:
VerixV

Get in touch

Fill in the form and our specialists
will contact you shortly