title: Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines
description: Vulnerability of improper checking for unusual or exceptional conditions
in Lamassu Bitcoin ATM Douro machines, in its 7.1 version,
the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user.
problem types: CWE-754 Improper Check for Unusual or Exceptional Conditions
affected:
{
defaultStatus: unaffected
product: Bitcoin ATM Douro machines
vendor: Lamassu
versions:
status: affected, version: 7.1
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: The vulnerabilities have been resolved in version 8.1.5-1 and 8.1.6.