CVE-2019-14715

MEDIUM

Verifone Pinpad Payment Terminals - Memory Corruption

Title source: llm

Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.

Core 1

Core References

Third Party Advisory x_refsource_misc

CVSS v3 6.8

EPSS 0.0033

EPSS Percentile 25.3%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787

Status published

Products (4)

verifone/p200_firmware

verifone/p400_firmware

verifone/vx_805_firmware

verifone/vx_820_firmware

Published Oct 23, 2020

Tracked Since Feb 18, 2026