What the vulnerability does
01Description
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS base score
8.2/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Key dates
02Disclosure timeline
May 4, 2023
CVE published
February 12, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability
CVE-2023-6784 Potential Use of the Sitefinity System for Distribution of Phishing Emails
CVE-2023-36706 Windows Deployment Services Information Disclosure Vulnerability
CVE-2023-47705 IBM Security Guardium Key Lifecycle Manager improper input validation
CVE-2021-3048 PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage
