High severity7.5NVD Advisory· Published Mar 20, 2018· Updated Jun 17, 2026

CVE-2017-17668

Description

Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Affected products

Ncr/S2 Dispenser controllerllm-fuzzy
Range: <0x0156

Patches

Vulnerability mechanics

References

www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdfnvdBroken LinkVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000