CVEvulnerability

CVE-2018-5717

7.5 HIGH Published 2018-03-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
Weaknesses
CWE-787

Description

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Affected configurations

• ncr s2 dispenser controller firmware (< 0x0108)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References