Read the docs

Lamassu

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Lamassu records in CISA KEV

No Lamassu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Douro Firmware · all components

Priority LOW 35

Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00126 Published 2024-01-30 No fix listed CWE-269
Priority LOW 32

Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to esc…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00247 Published 2024-01-30 No fix listed CWE-754
Priority LOW 30

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00125 Published 2024-01-30 No fix listed CWE-521
Open these records in search →