High severity7.1NVD Advisory· Published Aug 21, 2020· Updated Jun 17, 2026

CVE-2020-10124

Description

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer, which could allow an attacker with physical access to the internal components of the ATM to execute arbitrary code, including code that enables the attacker to commit deposit forgery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ncr/Aptra Xfs2 versions
cpe:2.3:o:ncr:aptra_xfs:05.01.00:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:ncr:aptra_xfs:05.01.00:*:*:*:*:*:*:*
- (no CPE)range: 05.01.00
Ncr/SelfServ ATMscpe-rescue
Range: APTRA XFS 05.01.00

Patches

Vulnerability mechanics

References

kb.cert.org/vuls/id/815655nvdThird Party AdvisoryUS Government Resource
www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-13_APTRA_XFS_nvdBroken Link
www.kb.cert.org/vuls/id/815655nvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000