Skip to content
Noroxi

NCR records

21 published records for vendor ncr.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4.8%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2021-3122
    65This week

    CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document

    CriticalCVSS 9.8WeaponizedEPSS 87%

    ncr · command center agentFeb 7, 2021

  • CVE-2023-48978
    39Monitor

    An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camer

    CriticalCVSS 9.8No exploitEPSS 1%

    ncr · itm web terminalJun 23, 2025

  • CVE-2023-47032
    39Monitor

    Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserSe

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47030
    39Monitor

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET reque

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47029
    39Monitor

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted P

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47031
    39Monitor

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47295
    39Monitor

    A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47297
    39Monitor

    A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing syste

    CriticalCVSS 9.8No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2023-47294
    32Monitor

    An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user

    HighCVSS 8.1No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-2018-5717
    30Monitor

    Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade

    HighCVSS 7.5No exploitEPSS 1%

    ncr · s2 dispenser controller firmwareMar 20, 2018

  • CVE-2017-17668
    30Monitor

    Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade

    HighCVSS 7.5No exploitEPSS 1%

    ncr · s1 dispenser controller firmwareMar 20, 2018

  • CVE-2020-9063
    30Monitor

    NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the c

    HighCVSS 7.6No exploitEPSS 0%

    ncr · aptra xfsAug 21, 2020

  • CVE-2020-10126
    30Monitor

    NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacke

    HighCVSS 7.6No exploitEPSS 0%

    ncr · aptra xfsAug 21, 2020

  • CVE-2020-10125
    30Monitor

    NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software

    HighCVSS 7.6No exploitEPSS 0%

    ncr · aptra xfsAug 21, 2020

  • CVE-2020-10124
    28Monitor

    NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host

    HighCVSS 7.1No exploitEPSS 0%

    ncr · aptra xfsAug 21, 2020

  • CVE-1999-0033
    28Monitor

    Command execution in Sun systems via buffer overflow in the at program.

    HighCVSS 7.2No exploitEPSS 0%

    sun · sunosJun 12, 1997

  • CVE-2023-47022
    26Monitor

    Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lea

    MediumCVSS 6.5No exploitEPSS 0%

    ncr · terminal handlerFeb 5, 2024

  • CVE-1999-0019
    21Monitor

    Delete or create a file via rpc.statd, due to invalid information.

    MediumCVSS 5.0No exploitEPSS 1%

    data general · dg uxApr 24, 1996

  • CVE-2020-10123
    21Monitor

    The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation req

    MediumCVSS 5.3No exploitEPSS 0%

    ncr · aptra xfsAug 21, 2020

  • CVE-2023-47298
    17Monitor

    An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain informa

    MediumCVSS 4.3No exploitEPSS 0%

    ncr · terminal handlerJun 23, 2025

  • CVE-1999-0078
    7Monitor

    pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.

    LowCVSS 1.9No exploitEPSS 0%

    ncr · mp-rasApr 18, 1996