CVE-2024-0674

Name of the Vulnerable Software and Affected Versions Lamassu Bitcoin ATM Douro version 7.1

Description A privilege escalation issue exists, allowing a local user to gain root permissions by modifying the updatescript.js and creating a done.txt file. This causes the watchdog process to run as root, executing the payload stored in the updatescript.js.

Recommendations For version 7.1, consider restricting access to the updatescript.js file and the watchdog process to prevent exploitation until a patch is available. As a temporary workaround, avoid using the updatescript.js file for updates and monitor the system for any suspicious activity related to the watchdog process.