Lucene search
MitreVULNRICHMENT:CVE-2023-28865HistoryAug 08, 2024 - 12:00 a.m.
CVE-2023-28865
2024-08-0800:00:00
mitre
github.com
4
diebold nixdorf
vynamic security suite
validation failure
directory contents
physical attack
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
9.5%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
total
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensuring the expected hash sum) during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system’s hard disk.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*"
],
"vendor": "dieboldnixdorf",
"product": "vynamic_security_suite",
"versions": [
{
"status": "affected",
"version": "3.3.0",
"versionType": "custom",
"lessThanOrEqual": "3.3.0sr14"
},
{
"status": "affected",
"version": "3.3.0sr14",
"lessThan": "4.0.0sr05",
"versionType": "custom"
},
{
"status": "affected",
"version": "3.3.0sr14",
"lessThan": "4.1.0.sr03",
"versionType": "custom"
},
{
"status": "affected",
"version": "3.3.0sr14",
"lessThan": "4.2.0sr02",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]Related
cve
cve
CVE-2023-28865
2024-08-08 18:15:09
nvd
nvd
CVE-2023-28865
2024-08-08 18:15:09
cvelist
cvelist
CVE-2023-28865
2024-08-08 00:00:00
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
9.5%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-28865