CVE-2020-9062

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Weakness enumeration

CWE-306 CWE-311 CWE-353

Affected software

Vendor	Product	Versions
Diebold Nixdorf	ProCash 2100xe USB ATM	Wincor Probase 1.1.30

References

https://kb.cert.org/vuls/id/221785Third Party Advisory, US Government Resource
https://kb.cert.org/vuls/id/221785Third Party Advisory, US Government Resource
https://www.kb.cert.org/vuls/id/221785

Timeline

Published: Aug 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-90637.6NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the c CVE-2020-90645.5Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. CVE-2020-90655.5Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticat CVE-2020-90667.8Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Appli CVE-2020-90678.0There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code e CVE-2020-90689.8Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have a CVE-2020-90696.5There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerabilit CVE-2020-90705.5Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The softwa CVE-2020-90716.5There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer w CVE-2020-90726.7Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local atta CVE-2020-90732.4Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability i CVE-2020-90745.3Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot