CyberSecBulletin

Lamassu vulnerabilities

We track 2 vulnerabilities in Lamassu products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 30, 2024.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Lamassu vulnerabilities

  • 7.1 High severity

    Bitcoin ATM Douro machines: Weak Password Requirements

    CVE-2024-0676Lamassu

    Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character pa

  • 7.8 High severity

    Bitcoin ATM Douro machines: Improper Preservation of Permissions

    CVE-2024-0674Lamassu

    Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file.