Pos System
Monthly
Missing authentication in FitSoft's POS System exposes the entire platform to unauthenticated remote attackers who can directly access and fully operate the system over the network without any credential barrier. All versions of the product are affected per the CPE wildcard, and the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms zero preconditions are required beyond network reachability. No public exploit has been identified at time of analysis, but the trivial exploitation conditions make this a high-priority remediation target for any deployment with external or semi-trusted network exposure.
A vulnerability was found in CodeAstro POS System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in CodeAstro POS System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Missing authentication in FitSoft's POS System exposes the entire platform to unauthenticated remote attackers who can directly access and fully operate the system over the network without any credential barrier. All versions of the product are affected per the CPE wildcard, and the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms zero preconditions are required beyond network reachability. No public exploit has been identified at time of analysis, but the trivial exploitation conditions make this a high-priority remediation target for any deployment with external or semi-trusted network exposure.
A vulnerability was found in CodeAstro POS System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in CodeAstro POS System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.