medium6.8
CVE-2023-33206
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Bo…
Impact
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dieboldnixdorf | Vynamic Security Suite | before 3.3.0sr16 from 4.0.0 before 4.0.0sr06 from 4.1.0 before 4.1.0sr04 from 4.2.0 before 4.2.0sr03 from 4.3.0 before 4.3.0sr01 |