Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.
References
| Link | Resource |
|---|---|
| https://github.com/emptynebuli | Not Applicable |
| https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 | Exploit Third Party Advisory |
| https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ | Product |
Configurations
History
09 Sep 2025, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/emptynebuli - Not Applicable | |
| References | () https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 - Exploit, Third Party Advisory | |
| References | () https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - Product | |
| First Time |
Dieboldnixdorf
Dieboldnixdorf vynamic Security Suite |
|
| CPE | cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:* |
29 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CWE | CWE-353 |
29 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-29 16:15
Updated : 2025-09-09 14:02
NVD link : CVE-2024-46917
Mitre link : CVE-2024-46917
CVE.ORG link : CVE-2024-46917
JSON object : View
Products Affected
dieboldnixdorf
- vynamic_security_suite
CWE
CWE-353
Missing Support for Integrity Check