Lucene search

CertccVULNRICHMENT:CVE-2020-9062

HistoryAug 21, 2020 - 8:30 p.m.

CVE-2020-9062

2020-08-2120:30:41

CWE-306

CWE-353

CWE-311

certcc

github.com

atm

security

vulnerability

interception

forgery

usb

encryption

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

References

kb.cert.org/vuls/id/221785