CVE-2020-9062

MEDIUM 5.3CVE-2020-9062 · Published 21/08/2020 · updated 17/06/2026

In short

CVE-2020-9062 is a MEDIUM (CVSS 5.3) vulnerability affecting probase (dieboldnixdorf).
Chance of exploitation in the next 30 days (EPSS): 0.17%, higher than 6.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
probase dieboldnixdorf	`= 1.1.30`	No fix yet

Description

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

References

kb.cert.org/vuls/id/221785 · Third Party Advisory
kb.cert.org/vuls/id/221785

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free