CVE-2018-17771

The CVE-2018-17771 entry concerns Ingenico Telium 2 POS terminals with hardcoded FTP credentials. The vulnerability affects Telium 2 devices exposing FTP credentials within the product, enabling unauthorized access via FTP when credentials are present. The issue is addressed in Telium 2 SDK v9.32...

CVE-2018-17771

Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17770

CVE-2018-17770 affects Ingenico Telium 2 POS terminals, where the NTPT3 protocol’s RemotePutFile command allows a buffer overflow due to improper input handling. The root cause is a buffer overflow in the command processing, which can compromise the device’s security context. The documented impac...

CVE-2018-17770

Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17769

Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17769

This CVE refers to Ingenico Telium 2 POS terminals. The vulnerability is a buffer overflow in the NTPT3 protocol’s 0x26 command, as described across multiple entries, with the root cause identified as the overflow mechanism. The implicated devices are Telium 2 POS terminals, and the fixed remedia...

CVE-2018-17768

Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17768

CVE-2018-17768 affects Ingenico Telium 2 POS terminals, where an insecure TRACE protocol was exposed. The issue is resolved by applying Telium 2 SDK v9.32.03 patch N. Affected component: TRACE protocol handling in Telium 2 devices; root cause reported as insecure TRACE use. CVSS data from sources...

CVE-2018-17767

Summary : CVE-2018-17767 affects Ingenico Telium 2 POS terminals due to hardcoded PPP credentials. The connected sources confirm the vulnerability and state the issue is fixed in Telium 2 SDK v9.32.03 patch N. Affected component : Ingenico Telium 2 POS terminals (SDK level). Root cause : hardcode...

CVE-2018-17767

Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17766

Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17766

The CVE-2018-17766 entry concerns Ingenico Telium 2 POS devices running Telium2 OS, where a flaw allows bypassing file-reading restrictions via the NTPT3 protocol. Multiple connected sources confirm the affected product family and the root cause is a file-access bypass within NTPT3. The vulnerabi...

CVE-2018-17765

Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17765

CVE-2018-17765 affects Ingenico Telium 2 POS terminals where TRACE protocol commands were undeclared. Multiple connected sources confirm the issue lies in Telium 2 software prior to the Telium 2 SDK v9.32.03 patch N. The remediation is to upgrade to Telium 2 SDK v9.32.03 patch N (or later) to res...

PT-2020-8622 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns an insecure TRACE protocol in Ingenico Telium 2 POS terminals. This problem is resolved in Telium 2 SDK v9.32.03 patch N...

PT-2020-8620 · Ingenico · Ingenico Telium 2 Pos

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS Telium2 OS versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue allows bypass of file-reading restrictions via the NTPT3 protocol. Recommendations: For versions prior to Telium 2 SDK v9.32.03 patch N,...

PT-2020-8625 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns hardcoded FTP credentials in Ingenico Telium 2 POS terminals. This allows unauthorized access. The problem is fixed in Telium 2 SD...

PT-2020-8628 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns an insecure NTPT3 protocol in Ingenico Telium 2 POS terminals. Recommendations: For versions prior to Telium 2 SDK v9.32.03 patch ...

Shopify: Stocky App Administrator can create a backdoor admin account by using an existing POS User

Details The Stocky App has POS Users that are being created once a POS Staff logs in into the application from the Point Of Sale application on a mobile device. From the users management page located at https://stocky.shopifyapps.com/users there's no visible way to edit those POS users. Although,...

Shopify: STAFF "No-Permissions" on the Store can retrieve the details Order via exchangeReceiptSend

I discovered a bug in an android mobile app that allowed STAFF No Permissions using Receipt Send to Mobile of any Order information in the Store. Steps to reproduce: 1 STAFF account is created and assigned "No Permissions" on a Shop by Owner/Admin 2 STAFF then login to shop. Notice that STAFF is...