CVE-2024-46916

HIGH

Diebold Nixdorf Vynamic Security Suite <= 4.3.0sr06 - Improper Access Control via Early Filesystem Deletion

Title source: llm
STIX 2.1

Description

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.

Scores

CVSS v3 8.1
EPSS 0.0037
EPSS Percentile 29.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-269 CWE-276 CWE-284
Status published
Products (1)
dieboldnixdorf/vynamic_security_suite < 4.3.0sr06
Published Aug 29, 2025
Tracked Since Feb 18, 2026