CyberSecBulletin

Ncratleos vulnerabilities

We track 2 vulnerabilities in Ncratleos products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2024.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Ncratleos vulnerabilities

  • 8.8 High severity

    Terminal Handler: Cross-Site Request Forgery

    CVE-2023-47020Ncratleos

    Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by a

  • 8.8 High severity

    Terminal Handler: Cross-Site Request Forgery

    CVE-2023-47024Ncratleos

    Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custo