CVE-2020-9062

MEDIUM

Diebold Nixdorf ProCash 2100xe USB ATMs - Info Disclosure

Title source: llm
STIX 2.1

Description

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

References (2)

Scores

CVSS v3 5.3
EPSS 0.0001
EPSS Percentile 1.9%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-353 CWE-306 CWE-311
Status published
Products (1)
dieboldnixdorf/probase 1.1.30
Published Aug 21, 2020
Tracked Since Feb 18, 2026