Terminal Handler CVE-2023-47294

Immediate actions: (1) Identify all systems running NCR Terminal Handler v1.5.1 via asset inventory; (2) Contact NCR support for patch availability and confirmed safe versions (e.g., 1.5.2 or later if available); (3) Upon patch release, prioritize deployment in production environments, especially those handling sensitive account operations. Interim mitigations pending patching: (a) Restrict network access to terminal handler interfaces using firewall rules and VPNs; limit access to trusted administrative networks only; (b) Implement session timeout policies and force re-authentication for account management operations; (c) Enforce multi-factor authentication (MFA) for any user account capable of modifying other accounts; (d) Monitor and alert on account deactivation/deletion events, flagging bulk operations; (e) Disable cookie-based session persistence for sensitive operations; require server-side session token validation with HMAC or cryptographic signatures; (f) Conduct session-handling code review focusing on cookie validation, deserialization, and privilege checks. Vendor patches: Status unknown from provided data—verify with NCR security advisories (typically published at ncr.com/security or via vendor mailing lists). After patching, validate through regression testing on non-production systems.