CVE-2023-24063

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.

Score

CVSS 3.1 6.8 Medium

Status

Modified - cve@mitre.org

Published

2024-08-08

Last modified

2025-03-27

Weaknesses

CWE-354

Affected products

• Vynamic Security Suite (Dieboldnixdorf)

References

• https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2…
• https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/