Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-10-23	CVE-2019-14718	Incorrect Default Permissions vulnerability in Verifone Mx900 Firmware 30251000 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation. local low complexity verifone CWE-276	6.7
2020-10-23	CVE-2019-14713	Unspecified vulnerability in Verifone Mx900 Firmware 30251000 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages. local low complexity verifone	5.5