Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Lamassu Component: Douro Ii Firmware Clear all filters
TI-2024-00623 CVE-2024-0676 · GHSA-597m-g6ch-mrf9

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

Priority LOW 30

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00125 Published 2024-01-30 No fix listed CWE-521
TI-2024-00622 CVE-2024-0675 · GHSA-wfhp-x3v9-6957

Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines

Priority LOW 32

Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to esc…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00247 Published 2024-01-30 No fix listed CWE-754
TI-2024-00621 CVE-2024-0674 · GHSA-54p6-86fq-2pg8

Improper privilege management in Lamassu Bitcoin ATM Douro machines

Priority LOW 35

Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00126 Published 2024-01-30 No fix listed CWE-269