CVE-2023-47024

Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing	Permissions Required
https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024	Third Party Advisory
https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing	Permissions Required
https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ncratleos:terminal_handler:1.5.1:*:*:*:*:*:*:*

History

21 Nov 2024, 08:29

Type	Values Removed	Values Added
References	~~() https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing - Permissions Required~~	() https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing - Permissions Required
References	~~() https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024 - Third Party Advisory~~	() https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024 - Third Party Advisory

10 Feb 2024, 02:50

Type	Values Removed	Values Added
First Time		Ncratleos terminal Handler Ncratleos
CPE	cpe:2.3:a:ncr:terminal_handler:1.5.1:::::::*	cpe:2.3:a:ncratleos:terminal_handler:1.5.1:::::::*

01 Feb 2024, 07:15

Type	Values Removed	Values Added
Summary	Cross Site Request Forgery vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to obtain sensitive information and escalate privileges via a crafted script to the UserSelfService component.	Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types.

26 Jan 2024, 17:43

Type	Values Removed	Values Added
CPE		cpe:2.3:a:ncr:terminal_handler:1.5.1:::::::*
CWE		CWE-352
First Time		Ncr Ncr terminal Handler
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
References	~~() https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing -~~	() https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing - Permissions Required
References	~~() https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024 -~~	() https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024 - Third Party Advisory

20 Jan 2024, 02:58

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-01-20 02:15

Updated : 2025-06-17 17:15

NVD link : CVE-2023-47024

Mitre link : CVE-2023-47024

CVE.ORG link : CVE-2023-47024

JSON object : View

Products Affected

ncratleos

terminal_handler

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2023-47024", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-01-20T02:15:07.600", "references": [{"url": "https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing", "tags": ["Permissions Required"], "source": "cve@mitre.org"}, {"url": "https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types."}, {"lang": "es", "value": "Vulnerabilidad de Cross Site Request Forgery en NCR Terminal Handler v.1.5.1 permite a un atacante remoto obtener informaci\u00f3n confidencial y escalar privilegios a trav\u00e9s de un script manipulado al componente UserSelfService."}], "lastModified": "2025-06-17T17:15:31.783", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ncratleos:terminal_handler:1.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7CBF0BA-23C2-4A14-9D14-2CF59375C880"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

8.8 /10