medium6.8
CVE-2023-40261
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the…
Impact
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dieboldnixdorf | Vynamic Security Suite | before 3.3.0sr17 from 4.0.0 before 4.0.0sr07 from 4.1.0 before 4.1.0sr04 from 4.2.0 before 4.2.0sr04 from 4.3.0 before 4.3.0sr03 |