Vulnerability
vulnerability:atm_remote_login_authentication_bypass
Also: authentication bypass
Software vulnerability that allowed remote access to an ATM without valid authentication.
Software vulnerability that allowed remote access to an ATM without valid authentication.
“a [00:10:00] vulnerability in the software to let him bypass that authentication altogether”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Barnaby Jack | Explicit | 35 |
| outgoing | AFFECTS | ATM | Derived | 35 |
| incoming | EXPLOITS | Barnaby Jack | Explicit | 35 |
ATM remote-login authentication bypass DISCOVERED_BY Barnaby Jack
Barnaby Jack found a vulnerability that bypassed authentication on an ATM remote login.
Explicit Confidence 99% · Jack Rhysider EP 35 Details
“Barnaby found a [00:10:00] vulnerability in the software to let him bypass that authentication altogether”
ATM remote-login authentication bypass AFFECTS ATM
The authentication-bypass vulnerability affected an ATM's remote-login software.
Derived Confidence 93% · Jack Rhysider EP 35 Details
“there was a remote login to the ATM but it had a username and password”
Barnaby Jack EXPLOITS ATM remote-login authentication bypass
Barnaby used the ATM authentication-bypass vulnerability to gain access without authenticating.
Explicit Confidence 96% · Jack Rhysider EP 35 Details
“allowing him to get right into the ATM”