Vulnerability Description
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dieboldnixdorf | Vynamic Security Suite | <= 4.3.0sr01 |
Related Weaknesses (CWE)
References
- https://github.com/emptynebuliNot Applicable
- https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057ExploitThird Party Advisory
- https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/Product
FAQ
What is CVE-2024-46917?
CVE-2024-46917 is a vulnerability with a CVSS score of 8.1 (HIGH). Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encry...
How severe is CVE-2024-46917?
CVE-2024-46917 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-46917?
Check the references section above for vendor advisories and patch information. Affected products include: Dieboldnixdorf Vynamic Security Suite.