ScrutisWeb is a secure solution that aids global organizations in monitoring ATMs, enhancing issue response time, and this solution is accessible through any browser.
The following things could be done with the help of this secure solution:-
Cybersecurity researchers at Synack recently discovered several vulnerabilities in the ScrutisWeb ATM fleet monitoring software developed by Iagona.
In total, four vulnerabilities were discovered by the researchers at Synack, and here below, we have mentioned them:-
Successful exploitation of these flaws could enable threat actors to hack ATMs remotely. Exploiting flaws, threat actors can do the following things:-
Remote command execution flaw enables hackers to erase files and establish a foothold, potentially escalating the exploitation in client infrastructure and creating a pivot point for the threat actors.
The CVE-2023-33871 exposes the file access, aiding web app download, while the CVE-2023-38257 and CVE-2023-35763 enable admin log in to the ScrutisWeb console.
Moreover, the hackers gain control to monitor the ATM fleet and perform actions like:-
More analysis is needed to check if personal ATMs can get custom software for card theft or illicit transactions, but extra tests were beyond the assessment’s scope.
Here below, we have mentioned all the recommendations offered by the US Cybersecurity and Infrastructure Security Agency (CISA):-
Keep informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.
A startling discovery by BeyondTrust researchers has unveiled a critical vulnerability in Microsoft Entra ID…
The Cofense Phishing Defense Center has uncovered a highly strategic phishing campaign that leverages Google…
Cybersecurity researchers from Trustwave’s Threat Intelligence Team have uncovered a large-scale phishing campaign orchestrated by…
Cisco Talos has uncovered a series of malicious threats masquerading as legitimate AI tool installers,…
Pure Crypter, a well-known malware-as-a-service (MaaS) loader, has been recognized as a crucial tool for…
A recent discovery by security researchers at BeyondTrust has revealed a critical, yet by-design, security…