CoreCVE
Back

MEDIUM

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited

Published Aug 21, 2020

Description

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (3)

CWE-306

Missing Authentication

CWE-311

Missing Encryption of Sensitive Data

CWE-353

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner certcc
Published Aug 21, 2020
Updated Sep 16, 2024
Reserved Feb 18, 2020
Link CVE-2020-9062
CISA Vulnrichment
Updated Aug 1, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-9062
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-9062