Beware of Flaws in mPOS fiserve trustlet Allowing Hackers to Take Over Your Device!

CVSScvssV3_1: 8.2

mPOS fiserve trustlet, a popular mobile point-of-sale solution, has been found to contain a vulnerability that can allow hackers to take control of devices.

The issue, tracked as CVE-2023-21501, is an improper input validation flaw. This means malicious actors can craft specially crafted inputs that are not validated properly by the app. This allows execution of arbitrary code on devices running vulnerable versions of mPOS fiserve trustlet.

Hackers can exploit this from local access to the device. All they need is physical possession of the device for a short period to launch an attack. This puts devices of retail owners, delivery staff and others using mPOS fiserve trustlet at risk if it falls into the wrong hands.

It is recommended to immediately update to the latest May 2023 or later version released by the developers. This version contains fixes for the security issue. Users should be extra cautious about leaving their devices unattended or lending them to unknown third parties. Basic digital safety practices like enabling screen locks can help prevent exploitation in some cases.

Staying updated to the latest software is one of the best ways to protect yourself from vulnerabilities like this. Always ensure your mobile point-of-sale solution and all apps on business critical devices are running the most recent versions available.