CVE-2023-24063

Published: Aug 8, 2024Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.

Affected (1)

Products: Dieboldnixdorf: Vynamic Security Suite

1 product

Vynamic Security Suite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dieboldnixdorf Vynamic Security Suite	Before 3.3.0sr10

Related CWEs

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (2)

https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/

Source: cve@mitre.org

Vendor Advisory

Timeline

No history available yet.