Vynamic Security Suite
Approved changes feed: RSS · Atom
cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dieboldnixdorf (366eda50-078a-57e0-a9c9-2a62413e25d0) |
|---|---|
| Product | Vynamic Security Suite (72c5449b-e634-5f6b-95a1-bff98b4cb427) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-46917 |
vulnerable | 2026-06-08 06:48:10.832494 |
Details available
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.
Published: 2025-08-29T00:00:00.000Z
Updated: 2025-08-29T17:32:46.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46916 |
vulnerable | 2026-06-08 06:48:10.831946 |
Details available
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.
Published: 2025-08-29T00:00:00.000Z
Updated: 2025-08-29T17:22:15.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40261 |
vulnerable | 2026-06-08 06:09:41.911462 |
Details available
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
Published: 2024-08-08T00:00:00.000Z
Updated: 2025-03-13T19:28:49.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33206 |
vulnerable | 2026-06-08 06:06:22.002780 |
Details available
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
Published: 2024-08-08T00:00:00.000Z
Updated: 2024-08-10T15:23:05.018Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28865 |
vulnerable | 2026-06-08 06:02:36.565123 |
Details available
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensuring the expected hash sum) during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
Published: 2024-08-08T00:00:00.000Z
Updated: 2024-08-08T20:09:23.502Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24064 |
vulnerable | 2026-06-08 05:56:05.134161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24063 |
vulnerable | 2026-06-08 05:56:05.133828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24062 |
vulnerable | 2026-06-08 05:56:05.133387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.