Ingenico Telium 2 Firmware
10 CVEs affecting Ingenico Telium 2 Firmware. Latest disclosed: 2020-09-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17774 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17773 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17772 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17768 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17767 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17765 | Medium | 6.8 | 2020-09-09 | Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17771 | Medium | 6.6 | 2020-09-09 | Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17770 | Medium | 6.6 | 2020-09-09 | Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17769 | Medium | 6.6 | 2020-09-09 | Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |
CVE-2018-17766 | Medium | 4.6 | 2020-09-09 | Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. |