CVE-2023-24064

Diebold Nixdorf Vynamic Security Suite (VSS) is affected up to version 3.3.0 SR4. The vulnerability arises because /etc/initab is not validated during Pre-Boot Authorization, enabling a physical attacker with access to the disk to manipulate contents. Remediation is to upgrade to version 3.3.0 SR...

CVE-2023-24063

CVE-2023-24063 affects Diebold Nixdorf Vynamic Security Suite (VSS) versions prior to 3.3.0 SR10. The root issue is failure to validate /etc/mtab during Pre-Boot Authorization (PBA), enabling a physical attacker who can alter the system disk contents to bypass or defeat the authorization process....

CVE-2023-40261

Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-40261 due to failure to validate file attributes during Pre-Boot Authorization (PBA). Affected versions are VSS before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02. The underlying issue is improper validation o...

CVE-2023-24062

Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-24062. The vulnerability arises from a failure to validate the directory structure of the root filesystem during Pre-Boot Authorization (PBA). Affected versions are VSS before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01. ...

CVE-2023-33206

Diebold Nixdorf Vynamic Security Suite (VSS) is affected by CVE-2023-33206 in versions prior to: 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01. The issue is that VSS fails to validate symbolic links during the Pre-Boot Authorization (PBA) process, enabling a physical attacker who...

CVE-2023-28865

The CVE concerns Diebold Nixdorf Vynamic Security Suite (VSS). In versions before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02, VSS fails to validate directory contents during Pre-Boot Authorization (PBA). The underlying issue is improper validation of certain directories (e.g., mismatch of...

CVE-2024-46917

The CVE-2024-46917 entry concerns Diebold Nixdorf Vynamic Security Suite up to version 4.3.0 SR01. The vulnerability arises because integrity validation does not validate file attributes or the contents of the /root directory, enabling malicious actions. Reported impact includes code execution, r...

CVE-2024-46916

Diebold Nixdorf Vynamic Security Suite up to version 4.3.0 SR06 contains a vulnerability where a delete operation in /etc/rc.d/init.d/mountfs can remove critical system files (e.g., /etc/fstab) before the filesystem is mounted. This can lead to code execution and, in some versions, enable recover...