CVE-2020-10123
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating a new session key that the attacker knows.
El dispensador de moneda de los Cajeros Automáticos NCR SelfSev que ejecutan APTRA XFS versiones 05.01.00 o anteriores, no autentica adecuadamente las peticiones de generación de claves de sesión desde el computador host, permitiendo a un atacante con acceso físico a los componentes internos del Cajero Automático emitir comandos válidos para dispensar moneda al generar una nueva clave de sesión que el atacante conoce.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-03-05 CVE Reserved
- 2020-08-21 CVE Published
- 2023-05-07 EPSS Updated
- 2024-09-16 CVE Updated
- 2024-09-16 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-287: Improper Authentication
- CWE-305: Authentication Bypass by Primary Weakness
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
https://kb.cert.org/vuls/id/116713 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Secure_white_paper-Dispenser_Security_Solution_September_2018.pdf | 2024-09-16 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ncr Search vendor "Ncr" | Aptra Xfs Search vendor "Ncr" for product "Aptra Xfs" | <= 05.01.00 Search vendor "Ncr" for product "Aptra Xfs" and version " <= 05.01.00" | - |
Affected
| in | Ncr Search vendor "Ncr" | Selfserv Atm Search vendor "Ncr" for product "Selfserv Atm" | - | - |
Safe
|