NetSight
critical9.8

CVE-2023-48978

An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.

Impact

An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.

Affected products

VendorProductAffected versions
NcrItm Web Terminal
Versions 4.4.0, 4.4.4

Weakness classification

References