What is CVE-2018-5717?

CVE-2018-5717 is a high-severity vulnerability in Ncr S2 Dispenser Controller, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2018-03-20.

How severe is CVE-2018-5717?

High severity. CVSS v3 base score is 7.5 out of 10.

Buffer overflow in Ncr S2 Dispenser Controller

CVE-2018-5717

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Vulnerability class: Buffer Overflow

EPSS: 0.012 (66.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Ncr S2_dispenser_controller
Ncr S2_dispenser_controller_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2018-5717?: CVE-2018-5717 is a high-severity vulnerability in Ncr S2 Dispenser Controller, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2018-03-20.
How severe is CVE-2018-5717?: High severity. CVSS v3 base score is 7.5 out of 10.