CSV Injection Vulnerability in NCR Terminal Handler
CVE-2023-47295

Currently unrated

Key Information:

Vendor: NCR Corporation
Status: NCR Terminal Handler
Vendor: CVE Published:; 23 June 2025

🔔 Create NCR Corporation Vulnerability Alert

What is CVE-2023-47295?

A vulnerability in NCR Terminal Handler version 1.5.1 allows an attacker to exploit a CSV injection flaw by crafting a specific payload. This vulnerability permits unauthorized execution of arbitrary commands through manipulation of text fields that accept string inputs, potentially leading to severe consequences for the system's integrity.

References

https://drive.google.com/file/d/14uldfUpLRIc-NfHiUco0ja-Z...

https://github.com/pwahba/cve-research/blob/main/CVE-2023...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 23, 2025
Vulnerability Reserved
Nov 6, 2023