CVE-2020-10125: Inadequate Encryption Strength

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor BNA software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files...

PT-2020-11947

Name of the Vulnerable Software and Affected Versions NCR SelfServ ATMs running APTRA XFS versions 04.02.01 through 05.01.00 Description The issue concerns the use of 512-bit RSA certificates in NCR SelfServ ATMs running APTRA XFS to validate software updates for the bunch note acceptor BNA. An...