{"id":"CVE-2020-9062","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-9062","generatedAt":"2026-10-27T21:17:27.748Z","title":"Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components…","description":"Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.","published":"2020-08-21T21:15:13.000Z","lastModified":"2026-06-17T03:27:26.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N"},"cwe":["CWE-306","CWE-311","CWE-353"],"affected":["dieboldnixdorf/probase"],"epss":{"score":0.00172,"percentile":0.06534,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://kb.cert.org/vuls/id/221785","tags":["Third Party Advisory","US Government Resource"],"source":"cret@cert.org"},{"url":"https://kb.cert.org/vuls/id/221785","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/221785","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-9062","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}