CVE-2018-17766

Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.

Score

CVSS 3.1 4.6 Medium

Status

Modified - cve@mitre.org

Published

2020-09-09

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Telium 2 Firmware (Ingenico)

References

• https://ingenico.us/smart-terminals/telium2
• https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-15/
• https://youtu.be/gtbS3Gr264w
• https://youtu.be/oyUD7RDJsJs