Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.
References
| Link | Resource |
|---|---|
| https://github.com/emptynebuli | Not Applicable |
| https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 | Exploit Third Party Advisory |
| https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ | Product |
Configurations
History
09 Sep 2025, 14:09
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dieboldnixdorf
Dieboldnixdorf vynamic Security Suite |
|
| CPE | cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:* | |
| References | () https://github.com/emptynebuli - Not Applicable | |
| References | () https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 - Exploit, Third Party Advisory | |
| References | () https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - Product |
29 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CWE | CWE-276 CWE-284 CWE-269 |
29 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-29 16:15
Updated : 2025-09-09 14:09
NVD link : CVE-2024-46916
Mitre link : CVE-2024-46916
CVE.ORG link : CVE-2024-46916
JSON object : View
Products Affected
dieboldnixdorf
- vynamic_security_suite