What is CVE-2020-9062?

CVE-2020-9062 is a medium-severity vulnerability in Diebold Nixdorf Procash 2100xe Usb Atm, classified under Missing Authentication for Critical Function. CVSS score: 5.3/10. Published 2020-08-21.

How severe is CVE-2020-9062?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Diebold Nixdorf Procash 2100xe Usb Atm

CVE-2020-9062

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

Vulnerability class: Broken Authentication

Published 2020-08-21 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.

EPSS exploit prediction

EPSS: 0.002 (5.9th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 6th percentile — 5.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

Diebold Nixdorf Procash 2100xe Usb Atm — versions Wincor Probase 1.1.30
Dieboldnixdorf Probase — versions 1.1.30
Dieboldnixdorf Procash 2100xe

Weakness classification (CWE)

References

kb.cert.org/vuls/id/221785 (US Government Resource, Third Party Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2020-9062?: CVE-2020-9062 is a medium-severity vulnerability in Diebold Nixdorf Procash 2100xe Usb Atm, classified under Missing Authentication for Critical Function. CVSS score: 5.3/10. Published 2020-08-21.
How severe is CVE-2020-9062?: Medium severity. CVSS v3 base score is 5.3 out of 10.