VULNERABILITY INTELLIGENCE

CVE-2017-17668

CVSS score7.5 HIGH
EPSS probability1.15%
CISA KEVNot currently listed
Published2018-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references