Author Topic: Buying an Apple MacBook for Just $1 Is Actually Possible Due to a Security Flaw  (Read 55 times)

0 Members and 1 Guest are viewing this topic.

Offline Quizmaster

  • Flying Nurse
  • Seasonal Competition Team
  • *
  • Posts: 23301
    • Smokey's Security Forums
  • .: Surf Queen
Buying an Apple MacBook for Just $1 Is Actually Possible Due to a Security Flaw
« Reply #1 on: September 12, 2017, 08:15:48 PM »
Buying an Apple MacBook for Just $1 Is Actually Possible Due to a Security Flaw
28 August 2017, 11:25 am

Buying super-expensive devices like Apple’s MacBook with just $1 is actually something that can be done due to a vulnerability in SAP POS systems, a research published by security firm ERPScan demonstrates.

The company has detailed in a YouTube video how a security flaw in the SAP POS Xpress Server can be abused to modify the price of a specific product, intercept payments, and collect financial information such as the details of a card that’s being used at a specific time.

The vulnerability resides in the SAP POS Xpress Server which handles the payments made through in-store SAP POS systems and the research shows that an attack has big chances to be successful because the implementation misses multiple authorization checks on the server side.

Patches already released

The security firm says that in order for a hacker to breach the SAP POS system, the attack must be launched from the same... (read more)

Source: Softpedia News / Security

>> To obtain the full Softpedia Security News article, click the link in the first post line <<

 


Except where otherwise stated, all content, graphics, banners and images included © 2006 - 2018 Smokey Services™ -- All rights reserved
Design board graphics, banners and images by DSTM & PseFrank

This site does not store profiling-, tracking-, third-party and/or any other non-essential cookie(s) on client computers and is fully compliant with the EU ePrivacy Directive
Smokey's does not use any Web Analytics/Analysis Service, and also does not use any browser fingerprinting techniques



Smokey's also provides free fully qualified Log / Malware Analysis & Removal Help and System Health Checks