CSV Injection Vulnerability in NCR Terminal Handler
CVE-2023-47295

9.8CRITICAL

Key Information:

Vendor

NCR Corporation

Status
NCR Terminal Handler
Vendor
CVE Published:
23 June 2025

What is CVE-2023-47295?

A vulnerability in NCR Terminal Handler version 1.5.1 allows an attacker to exploit a CSV injection flaw by crafting a specific payload. This vulnerability permits unauthorized execution of arbitrary commands through manipulation of text fields that accept string inputs, potentially leading to severe consequences for the system's integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://drive.google.com/file/d/14uldfUpLRIc-NfHiUco0ja-Z...
https://github.com/pwahba/cve-research/blob/main/CVE-2023...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.