Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.
| Software | From | Fixed in |
|---|---|---|
| dieboldnixdorf / vynamic_security_suite | 4.1.0 | 4.1.0sr04 |
| dieboldnixdorf / vynamic_security_suite | 4.3.0 | 4.3.0sr03 |
| dieboldnixdorf / vynamic_security_suite | - | 3.3.0sr17 |
| dieboldnixdorf / vynamic_security_suite | 4.0.0 | 4.0.0sr07 |
| dieboldnixdorf / vynamic_security_suite | 4.2.0 | 4.2.0sr04 |