Vulnerability Details CVE-2018-5717
Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
References
Products affected by CVE-2018-5717
-
cpe:2.3:h:ncr:s2_dispenser_controller:-
-
cpe:2.3:o:ncr:s2_dispenser_controller_firmware:*