Lucene search
MitreVULNRICHMENT:CVE-2023-33206HistoryAug 08, 2024 - 12:00 a.m.
CVE-2023-33206
2024-08-0800:00:00
mitre
github.com
3
diebold nixdorf vynamic security suite
symlink validation
pre-boot authorization
physical attacker
hard disk manipulation
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
17.9%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system’s hard disk.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*"
],
"vendor": "dieboldnixdorf",
"product": "vynamic_security_suite",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.3.0 SR16",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "4.0.0 SR06",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "4.1.0 SR04",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "4.2.0 SR03",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "4.3.0 SR01",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]Related
nvd
nvd
CVE-2023-33206
2024-08-08 18:15:09
cvelist
cvelist
CVE-2023-33206
2024-08-08 00:00:00
cve
cve
CVE-2023-33206
2024-08-08 18:15:09
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
17.9%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-33206