Описание
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.
Ссылки
- Not Applicable
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 4.3.0sr01 (включая)
cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
8.1 High
CVSS3
Дефекты
CWE-353
Связанные уязвимости
CVSS3: 8.1
github
5 месяцев назад
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.
EPSS
Процентиль: 13%
0.00042
Низкий
8.1 High
CVSS3
Дефекты
CWE-353