CVE-2023-47030: Code Injection
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService SOAP API endpoint to validate if a user exists.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47030?
CVE-2023-47030 is considered a high severity vulnerability due to its ability to allow remote code execution.
How does CVE-2023-47030 work?
CVE-2023-47030 exploits a vulnerability in NCR Terminal Handler v.1.5.1 by sending a crafted GET request to a UserService SOAP API endpoint.
How do I fix CVE-2023-47030?
To fix CVE-2023-47030, upgrade NCR Terminal Handler to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2023-47030?
CVE-2023-47030 can lead to unauthorized access, allowing attackers to execute arbitrary code and steal sensitive information.
Is CVE-2023-47030 specific to certain versions of NCR Terminal Handler?
Yes, CVE-2023-47030 specifically affects NCR Terminal Handler version 1.5.1.