Description
Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
References (4)
Core 4
Core References
Various Sources x_refsource_misc
https://www.ptsecurity.com/ww-en/analytics/threatscape/
Product x_refsource_misc
https://ingenico.us/smart-terminals/telium2
Exploit, Third Party Advisory x_refsource_misc
https://youtu.be/gtbS3Gr264w
Exploit, Third Party Advisory x_refsource_misc
https://youtu.be/oyUD7RDJsJs
Scores
CVSS v3
6.6
EPSS
0.0010
EPSS Percentile
26.2%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (1)
ingenico/telium_2_firmware
< 9.32.03
Published
Sep 09, 2020
Tracked Since
Feb 18, 2026