Code injection

2023-09-1119:15:00

PRIOn knowledge base

www.prio-n.com

diebold aglis xfs

code injection

vulnerability

remote attacker

arbitrary code

crafted payload

resolvemethod() parameter

nvd

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.

CPENameOperatorVersion
agilis_xfs_for_optevaeq4.1.61.1

CPE	Name	Operator	Version
	agilis_xfs_for_opteva	eq	4.1.61.1

References

medium.com/nightst0rm/t%E1%BA%A3n-m%E1%BA%A1n-v%E1%BB%81-l%E1%BB%97-h%E1%BB%95ng-trong-atm-diebold-f1040a70f2c9