I would like to learn more about the “hack”. Although I doubt a CVE will be issued.

I can only assume it’s a simple serial console port left open, and a service technician toolset was leaked with the commands to open the cash dispenser.