CVE-2017-17668

CVE-2017-17668 is a high-severity vulnerability affecting NCR S1 Dispenser Controller firmware versions prior to 0x0156. It allows an unauthenticated attacker to remotely upgrade or downgrade the device's firmware, potentially to versions with known security flaws. The CVSS score of 7.5 indicates a high impact on integrity, as an attacker could manipulate the device's operational code without authentication. While there is no known public exploit code or active exploitation, the vulnerability has garnered some community discussion and media coverage, highlighting its potential risk.