Back to Database
Status published
High
CVE-2019-10060
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers...
Vulnerability Description
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10060
Credits & Attribution
No credits recorded in the NVD database.
More from verifone
View All →CVE-2019-14719
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow...
High
7.8
CVE-2019-14718
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have...
Medium
6.7
CVE-2019-14717
Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530...
High
7.8
CVE-2019-14716
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented...
Medium
6.6
CVE-2019-14715
Verifone Pinpad Payment Terminals allow undocumented physical access to the...
Medium
6.8
Affected Vendor
verifone
View all reports →Affected Software
verix multi-app conductor
Vulnerable Versions:
2.7
Timeline
Official Publish:
March 25th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.