Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-40261
HistoryAug 08, 2024 - 12:00 a.m.

CVE-2023-40261

2024-08-0800:00:00
mitre
github.com
1
diebold nixdorf
vynamic security suite
file attribute validation

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

22.3%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system’s hard disk.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dieboldnixdorf",
    "product": "vynamic_security_suite",
    "versions": [
      {
        "status": "affected",
        "version": "3.3.0",
        "versionType": "custom",
        "lessThanOrEqual": "3.3.0sr16"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

22.3%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-40261