Intrusion PreventionAloha.POS.NCR.Command.Center.Agent.CMCAgent.Command.Injection
Description
This indicates an attack attempt to exploit a Command Injection Vulnerability in Aloha POS.
The vulnerability is due to insufficient validation of user-supplied inputs. A remote, authenticated attacker could exploit this vulnerability by sending a maliciously crafted request to the server. Successful exploitation could result in arbitrary OS commands executed in the context of SYSTEM.
Affected Products
Aloha POS NCR Command Center Agent 16.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch or updates available for this issue.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 59390 |
| Created | Nov 10, 2025 |
| Updated | Dec 09, 2025 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 90.36% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | OS Command Injection |