CVE-2017-17668: High severity NCR S1 Dispenser Controller Firmware vulnerability
Published Mar 20, 2018
·Updated
Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Affected Software
2 affected components
NCR S1 Dispenser Controller Firmware<0x0156
NCR S1 Dispenser controller
Event History
Mar 20, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17668?
CVE-2017-17668 has a high severity due to its potential for unauthorized firmware manipulation.
2
How do I fix CVE-2017-17668?
To fix CVE-2017-17668, upgrade the NCR S1 Dispenser controller firmware to version 0x0156 or later.
3
What kind of attack can exploit CVE-2017-17668?
CVE-2017-17668 can be exploited by an unauthenticated user to change or revert the firmware of the NCR S1 Dispenser controller.
4
What systems are affected by CVE-2017-17668?
CVE-2017-17668 affects NCR S1 Dispenser controller firmware versions prior to 0x0156.
5
Is there any workaround for CVE-2017-17668?
There are no known workarounds for CVE-2017-17668; updating the firmware is the recommended solution.