Ingenico manufactures point-of-sale and payment-processing terminals widely deployed in retail and hospitality environments, with its vulnerability footprint concentrating in the Telium 2 platform and associated firmware alongside its estate management tools. The recurring weakness classes span memory-safety issues such as classic buffer overflows, credential hardening defects, web application flaws including cross-site scripting, and access-control misconfigurations that are characteristic of embedded payment systems with legacy codebases and management interfaces. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ingenico over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-17774MEDIUM Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17773MEDIUM Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17772MEDIUM Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17770MEDIUM Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.6 | 23 | NO | NO |
CVE-2018-17769MEDIUM Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.6 | 23 | NO | NO |
CVE-2018-17768MEDIUM Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17767MEDIUM Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17765MEDIUM Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.8 | 23 | NO | NO |
CVE-2018-17771MEDIUM Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 6.6 | 22 | NO | NO |
CVE-2018-17766MEDIUM Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N. | Sep 9, 2020 | 4.6 | 18 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ingenico.
Media articles that mention a CVE ID that affects a product developed by Ingenico — matched by CVE ID, not by vendor name.