An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.
| Software | From | Fixed in |
|---|---|---|
| ncr / itm_web_terminal | 4.4.0 | 4.4.0.x |
| ncr / itm_web_terminal | 4.4.4 | 4.4.4.x |