NCR Atleos Terminal Handler 1.5.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ncratleos:terminal_handler:1.5.1:*:*:*:*:*:*:*

part: a version: 1.5.1 update: *

VendorNcratleos (32e525bf-4343-52f8-9034-6a2d9a95b1cf)
ProductTerminal Handler (6c00c9c5-b604-5e27-9a0d-ee8ae70c44cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47024 vulnerable 2026-06-08 06:14:23.781866 Details available
Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types.
Published: 2024-01-20T00:00:00.000Z
Updated: 2025-06-17T16:57:44.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47020 vulnerable 2026-06-08 06:14:23.779303 Details available
Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that lacks security controls and can accept custom content types.
Published: 2024-02-08T00:00:00.000Z
Updated: 2025-06-10T16:05:45.835Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.