CVE-2023-33206

Summary

CVE-2023-33206 is a vulnerability affecting Diebold Nixdorf Vynamic Security Suite (VSS) versions prior to 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01. The issue lies in the Pre-Boot Authorization (PBA) process, which fails to validate symlinks. This flaw provides an opportunity for a physical attacker with access to manipulate the system's hard disk, potentially exploiting this vulnerability. Successful attacks could compromise the security suite, putting the entire system at risk. It is strongly recommended that users update their VSS installations to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.