Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Terminal Handler CRITICAL 9.8
CVE-2023-47030

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a U…

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler CRITICAL 9.8
CVE-2023-47029

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST reque…

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler CRITICAL 9.8
CVE-2023-47031

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers, grantRo…

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler CRITICAL 9.8
CVE-2023-47295

A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any …

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler HIGH 8.1
CVE-2023-47294

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts…

Mitigation only
Fix from $1,950 2025-06-23
Terminal Handler CRITICAL 9.8
CVE-2023-47032

Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserService SOA…

Mitigation only
Fix from $2,300 2025-06-23
Itm Web Terminal CRITICAL 9.8
CVE-2023-48978

An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL com…

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler CRITICAL 9.8
CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system securit…

Mitigation only
Fix from $2,300 2025-06-23
Terminal Handler MEDIUM 6.5
CVE-2023-47022

Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV …

Mitigation only
Fix from $1,600 2024-02-06
Command Center Agent CRITICAL 9.8
CVE-2021-3122EPSS 87%

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to p…

Mitigation only
Fix from $2,300 2021-02-07
Aptra Xfs HIGH 7.6
CVE-2020-9063

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency d…

Fix: after 05.01.00
Fix from $1,950 2020-08-21
Aptra Xfs HIGH 7.6
CVE-2020-10125

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software updates, …

Mitigation only
Fix from $1,950 2020-08-21
Aptra Xfs HIGH 7.6
CVE-2020-10126

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacker with ph…

Mitigation only
Fix from $1,950 2020-08-21
Aptra Xfs HIGH 7.1
CVE-2020-10124

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer,…

Mitigation only
Fix from $1,950 2020-08-21
Aptra Xfs MEDIUM 5.3
CVE-2020-10123

The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests fro…

Fix: after 05.01.00
Fix from $1,600 2020-08-21
S1 Dispenser Controller Firmware HIGH 7.5
CVE-2017-17668

Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmw…

Fix: 0x0156+
Fix from $1,950 2018-03-20
S2 Dispenser Controller Firmware HIGH 7.5
CVE-2018-5717

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmw…

Fix: 0x0108+
Fix from $1,950 2018-03-20
Mp Ras HIGH 7.2
CVE-1999-0033

Command execution in Sun systems via buffer overflow in the at program.

Mitigation only
Fix from $1,950 1997-06-12