Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the systems hard disk.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vynamic_security_suite | Dieboldnixdorf | * | 3.3.0sr12 (excluding) |
| Vynamic_security_suite | Dieboldnixdorf | 4.0.0 (including) | 4.0.0sr04 (excluding) |
| Vynamic_security_suite | Dieboldnixdorf | 4.1.0 (including) | 4.1.0sr02 (excluding) |
| Vynamic_security_suite | Dieboldnixdorf | 4.2.0 (including) | 4.2.0sr01 (excluding) |