Vulnerability Description
A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0.1 is able to mitigate this issue. Upgrading the affected component is recommended. The vendor was contacted beforehand and was able to provide a patch very early.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://b.iakb.org/2025/06/26/Wincor-Nixdorf-PORT-IO-Driver-Buffer-Overflow/
- https://download.dieboldnixdorf.com/
- https://vuldb.com/?ctiid.329013
- https://vuldb.com/?id.329013
- https://vuldb.com/?submit.604823
FAQ
What is CVE-2025-5555?
CVE-2025-5555 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to ...
How severe is CVE-2025-5555?
CVE-2025-5555 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-5555?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.