PT-2025-35242 · Diebold Nixdorf+1 · Vynamic Security Suite+1

Published 2025-08-29 · Updated 2025-09-09 · CVE-2024-46916

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Diebold Nixdorf Vynamic Security Suite versions through 4.3.0 SR06

Description The software contains functionality that allows the removal of critical system files before the filesystem is properly mounted, such as using a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file. This can lead to code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.

Recommendations Update to a version later than 4.3.0 SR06.

Exploit

Fix

Improper Access Control

Incorrect Default Permissions

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-276

CWE-269

Related Identifiers

CVE-2024-46916

Affected Products

Vynamic Security Suite

Windows

References · 8

• 🔥 https://atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-46916 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46916 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1961502759951143267 · Twitter Post
• https://t.me/cveNotify/134761 · Telegram Post
• https://github.com/emptynebuli · Note
• https://dieboldnixdorf.com/en-us/banking/portfolio/software/security · Note
• https://twitter.com/CVEnew/status/1961463471712997782 · Twitter Post