PT-2024-12022 · Diebold Nixdorf · Diebold Nixdorf Vynamic Security Suite

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic Security Suite versions prior to 3.3.0 SR10 Description: The issue concerns the failure to validate the /etc/mtab file during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who can...

CVE-2023-28865

Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories e.g., ensuring the expected hash sum during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who...

CVE-2023-24064

Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...

CVE-2023-33206

Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-33206 in versions prior to: 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01. The issue is that VSS fails to validate symbolic links during the Pre-Boot Authorization (PBA) process, enabling a physical attacker who...

CVE-2023-24064

Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...

CVE-2020-19559

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...

CVE-2020-19559

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...

Code injection

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...

CVE-2020-19559

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...

Diebold Agilis XFS Code Issue Vulnerability

Diebold Agilis XFS is a software product designed to support the interaction and communication of automated banking devices. A security vulnerability exists in Diebold Aglis XFS for Opteva version v.4.1.61.1, which originated from a vulnerability that allows a remote attacker to execute arbitrary...

CVE-2020-19559

An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod parameter...

PT-2023-11524 · Diebold · Diebold Aglis Xfs For Opteva

Name of the Vulnerable Software and Affected Versions: Diebold Aglis XFS for Opteva version 4.1.61.1 Description: The issue allows a remote attacker to execute arbitrary code by sending a crafted payload to the ResolveMethod parameter. Recommendations: For Diebold Aglis XFS for Opteva version...

CVE-2020-19559

CVE-2020-19559 affects Diebold Aglis XFS for Opteva v4.1.61.1. The issue allows a remote attacker to execute arbitrary code by sending a crafted payload to the ResolveMethod() parameter. At least one connected source documents the vulnerability as a remote code execution in the Diebold Opteva XFS...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

Design/Logic Flaw

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

PT-2023-25541 · Diebold Nixdorf · Diebold Nixdorf Vynamic View Console

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic View Console versions 5.3.1 and earlier Description: The issue allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature. This enables the...

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...