📄 NCR Command Center Agent 16.3 Remote Code Execution

CMCAgent in NCR Command Center Agent version 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021...

CVE-2021-3122

creationtimestamp| type| source ---|---|--- 2021-02-07 22:38:35+00:00| exploited| https://t.me/cibsecurity/23198 2021-07-23 11:48:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3901 2025-10-02 21:02:28+00:00| seen|...