CVE-2023-4818 Security feature bypass in A920

High 7.6 Published 15 Jan 2024 Updated 17 Jun 2025

An attacker with physical USB access can downgrade the bootloader on PAX A920 devices due to a flawed version check, bypassing security controls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-4818?

CVE-2023-4818 is a high-severity vulnerability in PAX Technology A920, published on 15 Jan 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used.

The attacker must have physical USB access to the device in order to exploit this vulnerability.

Weakness: CWE-74

Which versions are affected by CVE-2023-4818?

It affects 1 product.

Products include Paxtechnology Paydroid.

How do I fix CVE-2023-4818?

No fix has been published for CVE-2023-4818 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-4818 being exploited?

There is no known exploitation of CVE-2023-4818 in the wild and no public exploit code.

Sources

Also known as GHSA-hpqw-739g-5cvm.