This can be combined with another exploit that allows the user to execute user code to achieve root on the ATM, so it's still troubling.