Message Integrity Issue in NCR SelfServ ATMs Using APTRA XFS

CVE-2020-10124

What is CVE-2020-10124?

The NCR SelfServ ATMs operating with APTRA XFS 05.01.00 exhibit a critical weakness in their message handling process. The lack of encryption, authentication, and integrity verification for communications between the BNA and the host system exposes the ATM to potential exploitation. An attacker with physical access to the ATM's internal components may execute arbitrary code, creating avenues for malicious activities, including deposit forgery. This vulnerability highlights the need for stringent security measures and regular updates to ensure ATM integrity and customer safety.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References