CVE-2024-46916

HIGH

Diebold Nixdorf Vynamic Security Suite <= 4.3.0sr06 - Improper Access Control via Early Filesystem Deletion

Title source: llm
STIX 2.1

Description

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.

Scores

CVSS v3 8.1
EPSS 0.0034
EPSS Percentile 25.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-284 CWE-269 CWE-276
Status published
Products (1)
dieboldnixdorf/vynamic_security_suite < 4.3.0sr06
Published Aug 29, 2025
Tracked Since Feb 18, 2026