← Back

CVE-2018-5717

nvd nist
Published: Mar 20, 2018Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Affected (1)

Ncr
1 product
S2 Dispenser Controller Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S2 Dispenser Controller Firmware
Before 0x0108
Running on/withPlatform Versions
Ncr
S2 Dispenser Controller
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.