Security Advisory

CVE-2023-40261

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-08 00:00:00
Last updated 2025-03-13 19:28:49
Assigner mitre
State PUBLISHED

Description

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the systems hard disk.