“The potential problem is with the Agilis XFS service using .NET Remoting via the“ outward-looking ”HTTP channel”, – explained Diebold Nixdorf in an official statement. The company reports that the problem affects only Opteva 4.x and does not apply to newer versions.
The developer released a fixed Agilis XFS variation for Opteva – BulkCashRec (BCRM) version 4.1.22, which closes “looking out” HTTP hole. In addition, it is reported that from a potential attack, you can protect yourself by using a simple firewall setting, which even old Opteva ATMs are equipped with.
The company explains that the NightSt0rm researchers deliberately turned off the firewall during their tests, and without this the attack on the vulnerability will not succeed. Moreover, according to Diebold Nixdorf, attackers never tried to exploit the vulnerability.
Read also: 57% of mail-servers have critical vulnerability
Inconsistency in question of disclosure data on hugs, apparently, was due to usual error. So, NightSt0rm experts assured that they were unable to contact representatives of Diebold Nixdorf and therefore disclosed information about the problem publicly.
“Unfortunately, they initially contacted us through the“ Contact us ”form on our website. Through it, hundreds of applications are sent to us every month with very common statements about vulnerabilities in one of our ATMs”, – explains Diebold Nixdorf.
The company assured that they did ignore the researchers, and now the connection with the NightSt0rm team has already been established.
Source: https://scribd.com
About Lecuminum.com Lecuminum.com pop-ups can not expose out of nowhere. If you have actually clicked…
About Webtmci24.top Webtmci24.top pop-ups can not launch out of the blue. If you have actually…
About Techlottads.top Techlottads.top pop-ups can not introduce out of nowhere. If you have clicked some…
About Streamcompletelysophisticatedthe-file.top Streamcompletelysophisticatedthe-file.top pop-ups can not introduce out of nowhere. If you have clicked some…
About Womadds.club Womadds.club pop-ups can not expose out of the blue. If you have actually…
About Controlchek.site Controlchek.site pop-ups can not expose out of the blue. If you have actually…