What’s Vulnerable › Vulnerabilities

CVE-2024-46917

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-29 · updated 2026-06-17
• Weakness: CWE-353

Description

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes.

Affected products

• Dieboldnixdorf Vynamic Security Suite: through 4.3.0sr01

References

• https://github.com/emptynebuli
• https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057
• https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/

Get alerted when CVE-2024-46917 or the next vulnerability affects your stack