CVEvulnerability

CVE-2020-9062

5.3 MEDIUM Published 2020-08-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-306, CWE-311, CWE-353

Description

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

Affected configurations

• dieboldnixdorf probase 1.1.30

Related

Weakness · CWE (3)

  • CWE-306 Missing Authentication for Critical Functionality weakness
  • CWE-311 Missing Encryption of Sensitive Data weakness
  • CWE-353 Missing Support for Integrity Check weakness

References