CVE-2023-48978

The NCR ITM Web terminal (versions 4.4.0 and 4.4.4 ) is vulnerable to a code injection issue. A remote attacker can execute arbitrary code by sending a crafted script to the IP camera URL component . The root cause is identified as improper handling of these scripts. As a temporary workaround, us...