Multiple Vendor ATM Machines Jackpotting ATM Redux Unauthorized Access Vulnerability

Bugtraq ID:	42619
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2010 12:00AM
Updated:	Aug 03 2010 12:00AM
Credit:	Barnaby Jack
Vulnerable:	Triton XScale ATM 0 Triton X2 ATM 0 Triton RT23XX 0 Triton RT21XX 0 Triton RL53XX 0 Triton RL51XX 0 Triton RL23XX 0 Triton RL16XX 0 Triton FT53XX 0 Triton FT51XX 0
Not Vulnerable:

Multiple Vendor ATM Machines Jackpotting ATM Redux Unauthorized Access Vulnerability

Multiple automated teller machines (ATMs) are prone to an unauthorized-access vulnerability.

An attacker can exploit this issue to gain unauthorized administrative access to the affected device. Successfully exploiting this issue will compromise the affected device.

The following ATM machines are affected:

Triton FT51XX
Triton FT53XX
Triton RL16XX
Triton RL23XX
Triton RL41XX
Triton RT21XX
Triton RT23XX
Triton X2 ATM
Triton XScale ATM
Hantle 1700W ATM
Hantle 4000T ATM
Hantle C4000 ATM

Multiple Vendor ATM Machines Jackpotting ATM Redux Unauthorized Access Vulnerability

An exploit was demonstrated at Black Hat in July of 2010.

Multiple Vendor ATM Machines Jackpotting ATM Redux Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references for more information.


Triton X2 ATM 0

• Triton X2 Security 2_1 Update.exe
  https://system.netsuite.com/core/media/media.nl?id=49905&c=719970&h=fa e172a5f22676307ca6&_xt=.bin&ck=2ArBF0VXAU6Fn9Wl&vid=2ArBF0VXATOFn9EM&c ktime=87878

Triton XScale ATM 0

• Triton XScale Security 2_2 Update.exe
  https://system.netsuite.com/core/media/media.nl?id=49902&c=719970&h=ac e8f8e912ff12a23baa&_xt=.bin&ck=2ArBF0VXAU6Fn9Wl&vid=2ArBF0VXATOFn9EM&c ktime=87878

Multiple Vendor ATM Machines Jackpotting ATM Redux Unauthorized Access Vulnerability

References:

• Subject: The Black Hat Demonstration (Hantle)
  
• TECHNICAL BULLETIN: Jackpotting ATMs (ATMequipment.com News)
  
• Triton Technical Bulletin: 10-08 (Triton )