What is CVE-2020-9062?

CVE-2020-9062 is a medium-severity vulnerability in Diebold Nixdorf Procash 2100xe Usb Atm, classified under Missing Authentication for Critical Function. CVSS score: 5.3/10. Published 2020-08-21.

How severe is CVE-2020-9062?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Diebold Nixdorf Procash 2100xe Usb Atm

CVE-2020-9062

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

Vulnerability class: Broken Authentication

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.

Affected products

Diebold Nixdorf Procash 2100xe Usb Atm — versions Wincor Probase 1.1.30
Dieboldnixdorf Probase — versions 1.1.30
Dieboldnixdorf Procash_2100xe

Weakness classification (CWE)

References

cret@cert.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2020-9062?: CVE-2020-9062 is a medium-severity vulnerability in Diebold Nixdorf Procash 2100xe Usb Atm, classified under Missing Authentication for Critical Function. CVSS score: 5.3/10. Published 2020-08-21.
How severe is CVE-2020-9062?: Medium severity. CVSS v3 base score is 5.3 out of 10.