PatchTheCVEncr vulnerabilities
Recent CVEs affecting ncr products. 9 tracked.
ncr has 9 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-06-23. Highest priority: CVE-2023-48978 (score 55/100).
- CVE-2023-47031 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST re
- CVE-2023-48978 CRITICAL 9.8 DOWNGRADE An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a
- CVE-2023-47298 MEDIUM 4.3 DOWNGRADE An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP
- CVE-2023-47297 CRITICAL 9.8 DOWNGRADE A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary com
- CVE-2023-47295 CRITICAL 9.8 DOWNGRADE A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands vi
- CVE-2023-47294 HIGH 8.1 DOWNGRADE An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily dea
- CVE-2023-47032 CRITICAL 9.8 DOWNGRADE Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via
- CVE-2023-47030 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensiti
- CVE-2023-47029 CRITICAL 9.8 DOWNGRADE An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensiti
FAQ
How do I fix ncr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ncr being exploited right now?
None of the tracked ncr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ncr CVE should I patch first?
CVE-2023-48978 currently ranks highest (55/100): An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a .