Skip to content
OpenAdvisories

Vendor

PayRange

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    Missing Authorization in PayRange API

    PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account.

  • High 7.5

    PayRange for Android, version 7.0.7, contains an SSL bypass vulnerability

    PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenticated attacker can steal information that the user sends.