[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEB4x4vrM7G2VHtt6OKEiwfMahJ77hbZ72IJt8ESPRNU":3,"g5a-risk:CVE-2020-10125":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":59,"references":60,"referencesCount":79,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":42,"cisaInfo":26,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":131,"notableEvents":132},"CVE-2020-10125","What is CVE-2020-10125?","NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files and CAB archives used to update BNA software, as well as bypass application whitelisting, resulting in the ability to execute arbitrary code.","NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software updates, which ca...","2020-08-21T21:15:11.497","2025-11-04T20:15:56.107",7.6,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","PHYSICAL","LOW","NONE","CHANGED","HIGH",null,0.9,6,[],[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":42},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","LOCAL","PARTIAL",4.6,"","MEDIUM",3.9,6.4,false,0.0019,[43,43,43,43,43,43,43],"High",[47,52,55],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"ncr","aptra_xfs","04.02.01","cpe:2.3:o:ncr:aptra_xfs:04.02.01:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"05.01.00","cpe:2.3:o:ncr:aptra_xfs:05.01.00:*:*:*:*:*:*:*",{"vendor":48,"product":56,"version":57,"criteria":58,"vulnerable":42},"selfserv_atm","-","cpe:2.3:h:ncr:selfserv_atm:-:*:*:*:*:*:*:*",3,[61,67,72,74,77],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F815655","Cert",[65,66],"Third Party Advisory","US Government Resource",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.ncr.com\u002Fcontent\u002Fdam\u002Fncrcom\u002Fcontent-type\u002Fdocuments\u002FNCR_Security_Alert-2018-13_APTRA_XFS_","Ncr",[71],"Broken Link",{"url":62,"source":63,"tags":73},[65,66],{"url":75,"source":63,"tags":76},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F815655",[],{"url":68,"source":69,"tags":78},[71],5,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",1,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2020-10125? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-10125, a high severity cyber security vulnerability from 2020. NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 i...","CVE-2020-10125, CVE-2020-10125 vulnerability, CVE-2020-10125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, ncr security, aptra_xfs vulnerability, selfserv_atm vulnerability","\u002Fwhat-is\u002Fcve-2020-10125",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-10125","Cybersecurity","CVE-2020-10125, CVE-2020-10125 vulnerability, CVE-2020-10125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":118,"Negate":26,"Nodes":119},"AND",[120,127],{"Operator":121,"Negate":42,"CPEMatch":122},"OR",[123,125],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"44C48487-3A33-4FA2-94E4-034B36129465",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"488456FE-C4C8-43D6-B6A2-5BFC3EC076EC",{"Operator":121,"Negate":42,"CPEMatch":128},[129],{"Vulnerable":42,"Criteria":58,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B95CF58A-28C7-4C1E-8B83-7BF0D515FF34",[],[],{"lastModified":11,"cacheTime":134,"version":33},1792352460714,{"score":136,"band":137,"action":138,"scoredAt":139},46,"Medium","Plan remediation","2026-10-16T06:49:14.742017+00:00"]