CVE-2018-5717

NONE EPSS 65.6%
Published Mar 20, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 20, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Threat Intelligence

EPSS Exploit Probability
65.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 2

VendorProductVersionRange
ncrs2_dispenser_controller_firmware* <0x0108
ncrs2_dispenser_controller*any

References 1

  • ncr.com https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf
    Broken Link

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.