What’s Vulnerable › Vulnerabilities

CVE-2018-17766

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-09 · updated 2026-06-17
• Weakness: CWE-732

Description

Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.

Affected products

• Ingenico Telium 2 Firmware: before 9.32.03 — fixed in 9.32.03

How to fix

Upgrade to a fixed version: Ingenico Telium 2 Firmware 9.32.03. Check the vendor advisory for mitigations.

References

• https://ingenico.us/smart-terminals/telium2
• https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-15/
• https://youtu.be/gtbS3Gr264w
• https://youtu.be/oyUD7RDJsJs
• https://ingenico.us/smart-terminals/telium2
• https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-15/
• https://youtu.be/gtbS3Gr264w
• https://youtu.be/oyUD7RDJsJs

Get alerted when CVE-2018-17766 or the next vulnerability affects your stack