Known Vulnerabilities for products from Ncr

Listed below are 11 of the newest known vulnerabilities associated with the vendor "Ncr".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-3122 CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within a... 9.8 - CRITICAL 2021-02-07 2021-02-09
CVE-2020-10126 NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enab... 7.6 - HIGH 2020-08-21 2021-12-20
CVE-2020-10125 NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor ... 7.6 - HIGH 2020-08-21 2020-08-27
CVE-2020-10124 NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BN... 7.1 - HIGH 2020-08-21 2021-12-20
CVE-2020-10123 The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key... 5.3 - MEDIUM 2020-08-21 2020-08-27
CVE-2020-9063 NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communication... 7.6 - HIGH 2020-08-21 2020-08-27
CVE-2018-5717 Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrad... 7.5 - HIGH 2018-03-20 2018-04-20
CVE-2017-17668 Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrad... 7.5 - HIGH 2018-03-20 2019-10-03
CVE-1999-0078 pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the... 1.9 - LOW 1996-04-18 2022-08-17
CVE-1999-0033 Command execution in Sun systems via buffer overflow in the at program. 7.2 - HIGH 1997-06-12 2022-08-17
CVE-1999-0019 Delete or create a file via rpc.statd, due to invalid information. 5 - MEDIUM 1996-04-24 2008-09-09

Known software with vulnerabilities from Ncr

Type Vendor Product Version
ApplicationNcrBootdiskmon2.3.0.0
ApplicationNcrCommand Center Agent16.3
ApplicationNcrNcr Sm3g Cmic Legacy2.0.0.1
ApplicationNcrPci Configurator1.2.0.0
ApplicationNcrTas2.0.1.2
ApplicationNcrWintools For Windows2.3.0.0