Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
| Software | From | Fixed in |
|---|---|---|
| dieboldnixdorf / vynamic_security_suite | 4.3.0 | 4.3.0sr01 |
| dieboldnixdorf / vynamic_security_suite | - | 3.3.0sr16 |
| dieboldnixdorf / vynamic_security_suite | 4.0.0 | 4.0.0sr06 |
| dieboldnixdorf / vynamic_security_suite | 4.1.0 | 4.1.0sr04 |
| dieboldnixdorf / vynamic_security_suite | 4.2.0 | 4.2.0sr03 |