CVE-2020-9062

2020-08-2000:00:00

CWE-306

CWE-311

CWE-353

certcc

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

JSON

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

CNA Affected

[
  {
    "product": "ProCash 2100xe USB ATM",
    "vendor": "Diebold Nixdorf",
    "versions": [
      {
        "status": "affected",
        "version": "Wincor Probase 1.1.30"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/221785