CVE-2020-10123
Medium
Description
The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating a new session key that the attacker knows.
SeverityMedium
CVSS5.3
Exploit probability—
ProductNcr Aptra Xfs
PublishedAug 21, 2020
First seenAug 21, 2020
Weakness typeCWE-305CWE-305
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncr aptra_xfs | v ≤ 05.01.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.