Lucene search

CertccCVELIST:CVE-2020-9062

HistoryAug 21, 2020 - 8:30 p.m.

CVE-2020-9062

2020-08-2120:30:41

CWE-306

CWE-353

CWE-311

certcc

www.cve.org

atm

security

vulnerability

deposit forgery

encryption

authentication

integrityverification

physical access

hostcomputer

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

32.3%

JSON

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

CNA Affected

[
  {
    "product": "ProCash 2100xe USB ATM",
    "vendor": "Diebold Nixdorf",
    "versions": [
      {
        "status": "affected",
        "version": "Wincor Probase 1.1.30"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/221785