CVE-2023-24062

Summary

CVE-2023-24062 is a vulnerability affecting Diebold Nixdorf's Vynamic Security Suite (VSS) versions before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01. The issue arises during the Pre-Boot Authorization (PBA) process where the software fails to validate the directory structure of the root file system. An attacker with physical access to the system can exploit this vulnerability by manipulating the contents of the hard disk, potentially gaining unauthorized access. This weakness could lead to significant security risks, emphasizing the importance of prompt patching to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.