PatchTheCVEterminal handler vulnerabilities and fixes
Recent CVEs affecting terminal handler, with upgrade or downgrade steps. 8 tracked.
Also searched as: terminalhandler.
terminal handler has 8 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-06-23. Highest priority: CVE-2023-47032 (score 54/100).
- CVE-2023-47031 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST re
- CVE-2023-47298 MEDIUM 4.3 DOWNGRADE An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP
- CVE-2023-47297 CRITICAL 9.8 DOWNGRADE A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary com
- CVE-2023-47295 CRITICAL 9.8 DOWNGRADE A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands vi
- CVE-2023-47294 HIGH 8.1 DOWNGRADE An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily dea
- CVE-2023-47032 CRITICAL 9.8 DOWNGRADE Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via
- CVE-2023-47030 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensiti
- CVE-2023-47029 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensiti
FAQ
How do I fix terminal handler vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is terminal handler being exploited right now?
None of the tracked terminal handler CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which terminal handler CVE should I patch first?
CVE-2023-47032 currently ranks highest (54/100): Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via .