Read the docs

NCR

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

NCR records in CISA KEV

No NCR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Terminal Handler 9 records MEDIUM Aptra Xfs 5 records LOW Mp-ras 3 records LOW Command Center Agent 1 record HIGH Itm Web Terminal 1 record MEDIUM S1 Dispenser Controller Firmware 1 record LOW S2 Dispenser Controller Firmware 1 record LOW

Records

1 record in Command Center Agent · all components

TI-2021-02216 CVE-2021-3122 · GHSA-xcf5-m6c7-75hg

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission…

Priority HIGH 84

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87924 Published 2021-02-07 No fix listed CWE-78
Open these records in search →