121 matches found
CVE-2023-28865
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories e.g., ensuring the expected hash sum during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who...
CVE-2023-28865: Insufficient Verification of Data Authenticity
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories e.g., ensuring the expected hash sum during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who...
Diebold Nixdorf Vynamic Security Suite security vulnerabilities
Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite, which originates from the inability to validate file attributes during the pre-boot authorization process, an...
CVE-2023-40261
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's har...
Diebold Nixdorf Vynamic Security Suite security vulnerabilities
Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite that originates from the inability to validate /etc/initab during pre-boot authorization, which can be exploit...
CVE-2023-24064
Diebold Nixdorf Vynamic Security Suite (VSS) is affected up to version 3.3.0 SR4. The vulnerability arises because /etc/initab is not validated during Pre-Boot Authorization, enabling a physical attacker with access to the disk to manipulate contents. Remediation is to upgrade to version 3.3.0 SR...
CVE-2023-33206
The Diebold Nixdorf Vynamic Security Suite (VSS) is vulnerable to a security flaw where it fails to validate symbolic links during the Pre-Boot Authorization (PBA) process. This oversight allows a physical attacker with the ability to manipulate the system's hard disk contents to exploit the syst...
CVE-2023-28865
The CVE concerns Diebold Nixdorf Vynamic Security Suite (VSS). In versions before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02, VSS fails to validate directory contents during Pre-Boot Authorization (PBA). The underlying issue is improper validation of certain directories (e.g., mismatch of...
CVE-2023-24062
Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-24062. The vulnerability arises from a failure to validate the directory structure of the root filesystem during Pre-Boot Authorization (PBA). Affected versions are VSS before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01. ...
CVE-2023-40261
Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-40261 due to failure to validate file attributes during Pre-Boot Authorization (PBA). Affected versions are VSS before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02. The underlying issue is improper validation o...
CVE-2023-24062: Improper Input Validation
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents...
CVE-2023-33206: Improper Validation of Integrity Check Value
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2023-24064: Undefined Security Weakness
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2023-24063
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2023-24063: Improper Validation of Integrity Check Value
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2023-24064
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2023-24063
Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...
CVE-2020-19559
An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...
