Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ncr Subscribe
Filtered by product Command Center Agent
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3122 1 Ncr 1 Command Center Agent 2021-02-09 10.0 HIGH 9.8 CRITICAL
CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021. NOTE: the vendor's position is that exploitation occurs only on devices with a certain "misconfiguration."