İçeriğe atla
Noroxi

NCR kayıtları

ncr üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4,8
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2021-3122
    65Bu hafta

    CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document

    KritikCVSS 9,8SilahlaştırılmışEPSS %87

    ncr · command center agent7 Şub 2021

  • CVE-2023-48978
    39İzleyin

    An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camer

    KritikCVSS 9,8İstismar yokEPSS %1

    ncr · itm web terminal23 Haz 2025

  • CVE-2023-47032
    39İzleyin

    Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserSe

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47030
    39İzleyin

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET reque

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47029
    39İzleyin

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted P

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47031
    39İzleyin

    An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47295
    39İzleyin

    A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47297
    39İzleyin

    A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing syste

    KritikCVSS 9,8İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2023-47294
    32İzleyin

    An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user

    YüksekCVSS 8,1İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-2018-5717
    30İzleyin

    Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade

    YüksekCVSS 7,5İstismar yokEPSS %1

    ncr · s2 dispenser controller firmware20 Mar 2018

  • CVE-2017-17668
    30İzleyin

    Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade

    YüksekCVSS 7,5İstismar yokEPSS %1

    ncr · s1 dispenser controller firmware20 Mar 2018

  • CVE-2020-9063
    30İzleyin

    NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the c

    YüksekCVSS 7,6İstismar yokEPSS %0

    ncr · aptra xfs21 Ağu 2020

  • CVE-2020-10126
    30İzleyin

    NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacke

    YüksekCVSS 7,6İstismar yokEPSS %0

    ncr · aptra xfs21 Ağu 2020

  • CVE-2020-10125
    30İzleyin

    NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software

    YüksekCVSS 7,6İstismar yokEPSS %0

    ncr · aptra xfs21 Ağu 2020

  • CVE-2020-10124
    28İzleyin

    NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host

    YüksekCVSS 7,1İstismar yokEPSS %0

    ncr · aptra xfs21 Ağu 2020

  • CVE-1999-0033
    28İzleyin

    Command execution in Sun systems via buffer overflow in the at program.

    YüksekCVSS 7,2İstismar yokEPSS %0

    sun · sunos12 Haz 1997

  • CVE-2023-47022
    26İzleyin

    Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lea

    OrtaCVSS 6,5İstismar yokEPSS %0

    ncr · terminal handler5 Şub 2024

  • CVE-1999-0019
    21İzleyin

    Delete or create a file via rpc.statd, due to invalid information.

    OrtaCVSS 5,0İstismar yokEPSS %1

    data general · dg ux24 Nis 1996

  • CVE-2020-10123
    21İzleyin

    The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation req

    OrtaCVSS 5,3İstismar yokEPSS %0

    ncr · aptra xfs21 Ağu 2020

  • CVE-2023-47298
    17İzleyin

    An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain informa

    OrtaCVSS 4,3İstismar yokEPSS %0

    ncr · terminal handler23 Haz 2025

  • CVE-1999-0078
    7İzleyin

    pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.

    DüşükCVSS 1,9İstismar yokEPSS %0

    ncr · mp-ras18 Nis 1996