Ncr Aptra Xfs — known CVE vulnerabilities

Every CVE whose affected-product data names Ncr Aptra Xfs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-10125 — CVSS 7.6 (high): NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software…
• CVE-2020-10126 — CVSS 7.6 (high): NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an…
• CVE-2020-9063 — CVSS 7.6 (high): NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the…
• CVE-2020-10124 — CVSS 7.1 (high): NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host…
• CVE-2020-10123 — CVSS 5.3 (medium): The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation…