Authentication Bypass in ATMs by NCR SelfSev

CVE-2020-10123

What is CVE-2020-10123?

The NCR SelfSev ATMs with APTRA XFS version 05.01.00 and earlier suffer from an authentication bypass in their currency dispenser. This vulnerability allows an attacker gaining physical access to the internal components of the ATM to exploit weak session key generation requests from the host computer. By doing so, the attacker can issue valid commands to dispense cash by generating a new session key, thus compromising the integrity of the ATM's security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References