CVE-2020-9062

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.
References
Link Resource
https://kb.cert.org/vuls/id/221785 Third Party Advisory US Government Resource
https://kb.cert.org/vuls/id/221785 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/221785
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:dieboldnixdorf:probase:1.1.30:*:*:*:*:*:*:*
cpe:2.3:h:dieboldnixdorf:procash_2100xe:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:39

Type Values Removed Values Added
References
  • () https://www.kb.cert.org/vuls/id/221785 -
References () https://kb.cert.org/vuls/id/221785 - Third Party Advisory, US Government Resource () https://kb.cert.org/vuls/id/221785 - Third Party Advisory, US Government Resource

Information

Published : 2020-08-21 21:15

Updated : 2024-11-21 05:39


NVD link : CVE-2020-9062

Mitre link : CVE-2020-9062

CVE.ORG link : CVE-2020-9062


JSON object : View

Products Affected

dieboldnixdorf

  • procash_2100xe
  • probase
CWE
CWE-306

Missing Authentication for Critical Function

CWE-311

Missing Encryption of Sensitive Data

CWE-353

Missing Support for Integrity Check