What is CVE-2020-10126?

CVE-2020-10126 is a high-severity vulnerability in Ncr Aptra_xfs, classified under Authentication Bypass by Primary Weakness. CVSS score: 7.6/10. Published 2020-08-21.

How severe is CVE-2020-10126?

High severity. CVSS v3 base score is 7.6 out of 10.

Vulnerability in Ncr Aptra_xfs

CVE-2020-10126

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacker with physical access to internal ATM components to restart the host computer and execute arbitrar…

EPSS: 0.003 (20.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ncr Aptra_xfs — versions 05.01.00
Ncr Selfserv Atm — versions APTRA XFS 05.01.00
Ncr Selfserv_atm

Weakness classification (CWE)

References

cret@cert.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
cret@cert.org (x_refsource_MISC, Broken Link)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2020-10126?: CVE-2020-10126 is a high-severity vulnerability in Ncr Aptra_xfs, classified under Authentication Bypass by Primary Weakness. CVSS score: 7.6/10. Published 2020-08-21.
How severe is CVE-2020-10126?: High severity. CVSS v3 base score is 7.6 out of 10.