CVE-2018-17770

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N

Description: The issue is a buffer overflow that occurs via the RemotePutFile command of the NTPT3 protocol. This buffer overflow is fixed in Telium 2 SDK v9.32.03 patch N.

Recommendations: For Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N, update to Telium 2 SDK v9.32.03 patch N to resolve the issue. As a temporary workaround, consider restricting access to the RemotePutFile command of the NTPT3 protocol until the update is applied.