CVE-2024-46916

{
  "id": "CVE-2024-46916",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-29T16:15:34.847",
  "lastModified": "2026-11-09T10:10:00.217",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition."
    },
    {
      "lang": "es",
      "value": "Diebold Nixdorf Vynamic Security Suite hasta la versión 4.3.0 SR06 contiene una funcionalidad que permite la eliminación de archivos críticos del sistema antes de que el sistema de archivos esté correctamente montado (por ejemplo, aprovechando una llamada de eliminación en /etc/rc.d/init.d/mountfs para eliminar el archivo /etc/fstab). Esto puede permitir la ejecución de código y, en algunas versiones, habilitar la recuperación de claves de cifrado de disco TPM y el descifrado de la partición del sistema de Windows."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-08-29T17:21:49.167368Z",
          "id": "CVE-2024-46916",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        },
        {
          "lang": "en",
          "value": "CWE-276"
        },
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:dieboldnixdorf:vynamic_security_suite:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "4.3.0sr06",
              "matchCriteriaId": "B7BE9E15-EFB6-4E22-AA91-7D506690E71B"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/emptynebuli",
      "source": "[email protected]",
      "tags": [
        "Not Applicable"
      ]
    },
    {
      "url": "https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}