The Ultimate ATM Heist: From File System Escape to Remote Code Execution

During testing on NCR ATMs, Trustwave SpiderLabs identified vulnerabilities that allowed for the ability to escape into the ATM’s file system and perform arbitrary file read/write. The ability to write files was escalated into arbitrary code execution, and subsequently, a reverse shell was obtained. Then, remote code execution was performed.

atm code code execution escape file system heist remote code execution system