Vulnerabilities > Verifone > Mx900 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-23 CVE-2019-14719 Command Injection vulnerability in Verifone Mx900 Firmware 30251000
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.
local
low complexity
verifone CWE-77
7.8
7.8
2020-10-23 CVE-2019-14711 Race Condition vulnerability in Verifone Mx900 Firmware 30251000
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
local
high complexity
verifone CWE-362
7.0
7.0