High severity7.5NVD Advisory· Published Mar 20, 2018· Updated Jun 17, 2026

CVE-2018-5717

Description

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Affected products

Ncr/S2 Dispenser controllerllm-create
Range: <0x0108

Patches

Vulnerability mechanics

References

www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdfnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000