CVE-2024-0675CWE-754

Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines

Medium · published January 30, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

Vulnerability of improper checking for unusual or exceptional conditions

in Lamassu Bitcoin ATM Douro machines, in its 7.1 version,

the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2024-01-30T12:20Z
EPSS history
Timeline
  • 30 JAN 12:20Z
    Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines
    cvelistv5