PT-2024-13399 · Ncr · Ncr Terminal Handler

30T4 + 1 · Published 2024-02-05 · Updated 2025-06-17 · CVE-2023-47022

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions NCR Terminal Handler version 1.5.1

Description The issue allows an unprivileged user to edit the audit logs for any user, potentially leading to CSV injection. It also enables a remote attacker to execute arbitrary code via a crafted script to the payload parameter.

Recommendations For NCR Terminal Handler version 1.5.1, consider restricting access to the audit logs and limiting the ability to edit them until a patch is available. As a temporary workaround, avoid using the payload parameter in affected API endpoints until the issue is resolved.

Exploit

Fix

IDOR

RCE

Weakness Enumeration

CWE-639

CWE-1236

Related Identifiers

CVE-2023-47022

Affected Products

Ncr Terminal Handler

References · 10

• 🔥 https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022 · Exploit
• https://osv.dev/vulnerability/CVE-2023-47022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47022 · Security Note
• https://t.me/cvenotify/70662 · Telegram Post
• https://twitter.com/CVEnew/status/1754686018941550653 · Twitter Post
• https://t.me/cvenotify/70679 · Telegram Post
• https://t.me/cvenotify/71291 · Telegram Post
• https://t.me/cvenotify/125971 · Telegram Post
• https://t.me/cvenotify/70143 · Telegram Post
• https://t.me/cvenotify/70206 · Telegram Post