CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing…

Critical · published June 23, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

🔥 A settings manipulation flaw in NCR Terminal Handler v1.5.1 lets attackers execute arbitrary commands like editing security configurations — a recipe for chaos! Think of it like letting an unauthorized guest into a secure server room with a master key. They can reconfigure the entire security system without anyone knowing! An attacker could exploit this vulnerability to run any command they want, potentially compromising sensitive system security settings. Imagine having your security audit logs altered or erased — that's like wiping the fingerprints off a crime scene! The consequences could be absolutely devastating for any organization relying on this system.

Put simply

Think of it like letting an unauthorized guest into a secure server room with a master key. They can reconfigure the entire security system without anyone knowing! This vulnerability allows attackers to manipulate settings within NCR Terminal Handler, enabling the execution of arbitrary commands, which could lead to unauthorized access and modification of security configurations.

What to do

An attacker could exploit this vulnerability to run any command they want, potentially compromising sensitive system security settings. Imagine having your security audit logs altered or erased — that's like wiping the fingerprints off a crime scene! The consequences could be absolutely devastating for any organization relying on this system. Patch to version 1.5.2 immediately to secure your system. Additionally, review and tighten access controls to the NCR Terminal Handler settings to prevent unauthorized manipulation. Regularly audit your security configurations to ensure they're intact. You've got this! With swift action, you can shield your system and maintain security hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00514 · 43.0th percentile
Published
2025-06-23T00:00Z
EPSS history
Timeline
  • 23 JUN 00:00Z
    A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing…
    cvelistv5