PatchTheCVECVE-2024-0675: Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machine
CVE-2024-0675 is a medium-severity flaw (CVSS 6.3) affecting douro firmware, douro ii firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.3 (Medium) |
| Attack vector | Physical |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 84%) |
| CISA exploited list | No |
| Weakness | CWE-754 |
| Published | 2024-01-30 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-0675?
douro firmware: mitigate or apply the listed mitigation; douro ii firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-0675 being exploited?
CVE-2024-0675 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-0675 affect?
CVE-2024-0675 affects douro firmware, douro ii firmware. Severity is medium (CVSS 6.3). Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, a
How urgent is CVE-2024-0675?
Priority 26/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-0676 MEDIUM 5.6 MITIGATE MITIGATE Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which a
- CVE-2024-0674 MEDIUM 6.3 MITIGATE MITIGATE Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allo