Douro Firmware vulnerabilities

2 known vulnerabilities in Douro Firmware from Lamassu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Bitcoin ATM Douro machines: Weak Password Requirements

  CVE-2024-0676Jan 30, 2024Lamassu

  Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character pa

• 7.8 High severity

  Bitcoin ATM Douro machines: Improper Preservation of Permissions

  CVE-2024-0674Jan 30, 2024Lamassu

  Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file.