CVE-2024-0674 | Lamassu Bitcoin ATM Douro Machine 7.1 updatescript.js privileges management

A vulnerability has been found in Lamassu Bitcoin ATM Douro Machine 7.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updatescript.js. The manipulation leads to improper privilege management.

This vulnerability is known as CVE-2024-0674. It is possible to launch the attack on the physical device. There is no exploit available.