CVE-2024-46916

Katalog CVE

CVSS 8.1 · High EPSS 0,37%

Kerentanan Improper Privilege Management pada dieboldnixdorf vynamic security suite. Skor CVSS 3.1 8.1 (High) menurut CISA ADP.

Deskripsi (NVD)

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.

Rincian

Terbit di NVD

29 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management
CWE-276: Incorrect Default Permissions
CWE-284: Improper Access Control

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 exploit · advisory pihak ketiga
• https://github.com/emptynebuli not applicable
• https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ product