Ingenico Telium 2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ingenico Telium 2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2018-17765 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17768 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17772 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17773 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch…
• CVE-2018-17774 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17767 — CVSS 6.8 (medium): Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17770 — CVSS 6.6 (medium): Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK…
• CVE-2018-17771 — CVSS 6.6 (medium): Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
• CVE-2018-17769 — CVSS 6.6 (medium): Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03…
• CVE-2018-17766 — CVSS 4.6 (medium): Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03…