cve.bz

CVE-2020-10126

7.6 highEPSS 0.3%

High (7.6) in ncr aptra xfs. EPSS 0.3% chance of exploitation in the next 30 days.

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacker with physical access to internal ATM components to restart the host computer and execute arbitrary code with SYSTEM privileges because while booting, the update process looks for CAB archives on removable media and executes a specific file without first validating the signature of the CAB archive.

Severity

CVSS 3.1

7.6 high
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs
CWE-347, CWE-305
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON