Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
| Software | From | Fixed in |
|---|---|---|
| dieboldnixdorf / vynamic_security_suite | 4.2.0 | 4.2.0sr01 |
| dieboldnixdorf / vynamic_security_suite | 4.1.0 | 4.1.0sr02 |
| dieboldnixdorf / vynamic_security_suite | 4.0.0 | 4.0.0sr04 |
| dieboldnixdorf / vynamic_security_suite | - | 3.3.0sr12 |