CVE-2023-47030

The vulnerability exists in NCR Terminal Handler's UserService SOAP API endpoint, which implements user existence validation via GET requests without proper input sanitization. The root cause is CWE-94 (Code Injection), indicating that user-supplied input from the GET request is directly interpreted as code without validation or encoding. SOAP (Simple Object Access Protocol) endpoints are common attack surfaces when they accept untrusted input for object manipulation. The vulnerable endpoint fails to properly sanitize parameters passed during user validation checks, allowing attackers to inject malicious code that executes within the terminal handler's security context. This is exacerbated by the SOAP framework's reliance on serialization/deserialization of complex objects, which can be exploited to instantiate arbitrary classes or execute functions.