CVE-2017-17668 | BDVDB-2026-98095 Detail

Description#

Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf

Exploit#

No public exploit known

History#

Version 12018-03-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.