High severity · published Feb 8, 2024
CVE-2023-47020
Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user…
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that lacks security controls and can accept custom content types.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TH
Terminal Handler · Ncratleos
1.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-47020
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-47020
Third Party Advisory
https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47020
Exploit
https://youtu.be/pGB3LKdf64w
More from Terminal Handler
8.8
CVE-2023-47024
Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover