PT-2020-11947 · Ncr · Aptra Xfs+1

Published 2020-08-21 · Updated 2025-11-04 · CVE-2020-10125

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NCR SelfServ ATMs running APTRA XFS versions 04.02.01 through 05.01.00

Description The issue concerns the use of 512-bit RSA certificates in NCR SelfServ ATMs running APTRA XFS to validate software updates for the bunch note acceptor (BNA). An attacker with physical access can break these certificates in a short period, allowing them to sign arbitrary files and CAB archives used for BNA software updates. This enables the bypassing of application whitelisting, resulting in the ability to execute arbitrary code.

Recommendations For versions 04.02.01 through 05.01.00, consider upgrading to a version that implements stronger encryption methods to validate BNA software updates, thereby preventing the exploitation of weak 512-bit RSA certificates. As a temporary workaround, restrict physical access to the ATMs to minimize the risk of exploitation.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2020-10125

Affected Products

Aptra Xfs

Ncr Selfserv Atms

References · 5

• https://osv.dev/vulnerability/CVE-2020-10125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10125 · Security Note
• https://t.me/cveNotify/141710 · Telegram Post
• https://kb.cert.org/vuls/id/815655 · Note
• https://ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-13_APTRA_XFS_ · Note