CVE-2020-9063: Buffer Overflow
NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and execute arbitrary code with SYSTEM privileges on the host computer by causing a buffer overflow on the host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9063?
CVE-2020-9063 is classified as a critical severity vulnerability due to the potential for unauthorized access and malicious payload injection.
How do I fix CVE-2020-9063?
To remediate CVE-2020-9063, upgrade NCR SelfServ ATMs running APTRA XFS to version 05.01.01 or later, which includes security improvements.
Who is affected by CVE-2020-9063?
CVE-2020-9063 affects NCR SelfServ ATMs that are running APTRA XFS versions 05.01.00 or earlier.
What type of attack does CVE-2020-9063 enable?
CVE-2020-9063 enables an attacker with physical access to inject malicious payloads into the ATM by exploiting vulnerabilities in USB HID communications.
What can attackers do with CVE-2020-9063?
Attackers exploiting CVE-2020-9063 can manipulate currency dispensing functions and potentially execute arbitrary code on the ATM system.