What’s Vulnerable › Vulnerabilities

CVE-2018-17772

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-09 · updated 2026-06-17

Description

Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.

Affected products

• Ingenico Telium 2 Firmware: before 9.32.03 — fixed in 9.32.03

How to fix

Upgrade to a fixed version: Ingenico Telium 2 Firmware 9.32.03. Check the vendor advisory for mitigations.

References

• https://ingenico.us/smart-terminals/telium2
• https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-18/
• https://youtu.be/gtbS3Gr264w
• https://youtu.be/oyUD7RDJsJs
• https://ingenico.us/smart-terminals/telium2
• https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-18/
• https://youtu.be/gtbS3Gr264w
• https://youtu.be/oyUD7RDJsJs

Get alerted when CVE-2018-17772 or the next vulnerability affects your stack