CVE-2017-17668
NONE EPSS 63.4%
Published Mar 20, 20188y ago · Modified Jun 17, 20262w ago
Published Mar 20, 2018 8y ago
Last Modified Jun 17, 2026 2w ago
Description
Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Threat Intelligence
EPSS Exploit Probability
63.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-863 Incorrect Authorization Authorization
Affected Products 2
References 1
- ncr.com https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.