CVE-2020-10123 : Security Advisory and Response

NCR SelfServ ATM running APTRA XFS 05.01.00 or earlier is vulnerable to an authentication bypass, allowing attackers to dispense currency.

Understanding CVE-2020-10123

This CVE involves a security vulnerability in NCR SelfServ ATMs that could be exploited by attackers to issue unauthorized commands for dispensing currency.

What is CVE-2020-10123?

The vulnerability in NCR SelfServ ATMs allows attackers with physical access to internal components to generate a new session key, bypassing authentication, and issue valid commands to dispense currency.

The Impact of CVE-2020-10123

The impact of this vulnerability is significant as it enables unauthorized individuals to manipulate the ATM's currency dispensing mechanism, potentially leading to financial losses.

Technical Details of CVE-2020-10123

This section provides more technical insights into the vulnerability.

Vulnerability Description

The currency dispenser of NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier lacks proper authentication for session key generation requests, allowing attackers to generate new session keys and dispense currency.

Affected Systems and Versions

Product: SelfServ ATM
Vendor: NCR
Versions Affected: APTRA XFS 05.01.00 or earlier

Exploitation Mechanism

Attackers with physical access to internal ATM components can exploit the vulnerability by generating a new session key to issue valid commands for dispensing currency.

Mitigation and Prevention

To address and prevent exploitation of this vulnerability, the following steps are recommended:

Immediate Steps to Take

Upgrade affected ATMs to a secure version of APTRA XFS.
Implement physical security measures to restrict unauthorized access to ATM components.
Monitor ATM activity for any suspicious behavior.

Long-Term Security Practices

Regularly update and patch ATM software to address security vulnerabilities.
Conduct security training for ATM operators to enhance awareness of potential threats.

Patching and Updates

Apply security patches provided by NCR to fix the authentication bypass issue in affected ATMs.