[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgj_5F7QTFi8sLn2kTjUOVuui6egRKTLa22KAPigR-Dw":3,"g5a-risk:CVE-2020-10123":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":56,"references":57,"referencesCount":92,"weaknesses":93,"weaknessesCount":56,"isActivelyExploited":42,"cisaInfo":27,"otxData":27,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":146,"notableEvents":147},"CVE-2020-10123","What is CVE-2020-10123?","The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating a new session key that the attacker knows.","The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the ho...","2020-08-21T21:15:11.37","2025-11-04T20:15:52.473",5.3,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","CHANGED","HIGH","MEDIUM",null,0.9,4,[],[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":22,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":42},{"Version":34,"VectorString":35,"AccessVector":36,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":37,"AvailabilityImpact":23,"BaseScore":38,"BaseSeverity":39,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","LOCAL","PARTIAL",2.1,"",3.9,2.9,false,0.00436,[43,43,43,43,43,43,43],"Medium",[47,52],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"ncr","aptra_xfs","*","cpe:2.3:o:ncr:aptra_xfs:*:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":54,"criteria":55,"vulnerable":42},"selfserv_atm","-","cpe:2.3:h:ncr:selfserv_atm:-:*:*:*:*:*:*:*",2,[58,64,70,73,76,79,81,84,86,88,90],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F116713","Cert",[62,63],"Third Party Advisory","US Government Resource",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.ncr.com\u002Fcontent\u002Fdam\u002Fncrcom\u002Fcontent-type\u002Fdocuments\u002FNCR_Secure_white_paper-Dispenser_Security_Solution_September_2018.pdf","Ncr",[68,69],"Exploit","Vendor Advisory",{"url":71,"source":66,"tags":72},"https:\u002F\u002Fwww.ncr.com\u002Fcontent\u002Fdam\u002Fncrcom\u002Fcontent-type\u002Fdocuments\u002FNCR_Security_Alert-2018-10-S1_and_S2_Critical_Update.pdf",[69],{"url":74,"source":66,"tags":75},"https:\u002F\u002Fwww.ncr.com\u002Fcontent\u002Fdam\u002Fncrcom\u002Fcontent-type\u002Fdocuments\u002FNCR_Security_Alert-2018-13_APTRA_XFS_v5.pdf",[69],{"url":77,"source":66,"tags":78},"https:\u002F\u002Fwww.ncr.com\u002Fcontent\u002Fdam\u002Fncrcom\u002Funsorted\u002Fjackpot_attacks_in_the_us_-_january_2018.pdf",[69],{"url":59,"source":60,"tags":80},[62,63],{"url":82,"source":60,"tags":83},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F116713",[],{"url":65,"source":66,"tags":85},[68,69],{"url":71,"source":66,"tags":87},[69],{"url":74,"source":66,"tags":89},[69],{"url":77,"source":66,"tags":91},[69],11,[94,101],{"id":95,"name":96,"description":97,"extendedDescription":39,"status":98,"abstraction":99,"structure":100},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",{"id":102,"name":103,"description":104,"extendedDescription":39,"status":98,"abstraction":105,"structure":100},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","Base",[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2020-10123? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-10123, a medium severity cyber security vulnerability from 2020. The currency dispenser of NCR SelfSev ATMs running APTRA ...","CVE-2020-10123, CVE-2020-10123 vulnerability, CVE-2020-10123 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, ncr security, aptra_xfs vulnerability, selfserv_atm vulnerability","\u002Fwhat-is\u002Fcve-2020-10123",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-10123","Cybersecurity","CVE-2020-10123, CVE-2020-10123 vulnerability, CVE-2020-10123 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133],{"Operator":134,"Negate":27,"Nodes":135},"AND",[136,142],{"Operator":137,"Negate":42,"CPEMatch":138},"OR",[139],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":141},"EEEBE53E-F7F4-4AF1-B69A-F49A77C55419","05.01.00",{"Operator":137,"Negate":42,"CPEMatch":143},[144],{"Vulnerable":42,"Criteria":55,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B95CF58A-28C7-4C1E-8B83-7BF0D515FF34",[],[],{"lastModified":11,"cacheTime":149,"version":34},1792347411427,{"score":151,"band":45,"action":152,"scoredAt":153},40,"Plan remediation","2026-10-16T06:49:14.741514+00:00"]