PT-2025-42709 · Nixdorf Wincor · Nixdorf Wincor Port Io Driver+1

Rickqwq · Published 2025-10-18 · Updated 2025-10-18 · CVE-2025-5555

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nixdorf Wincor PORT IO Driver versions up to 1.0.0.1

Description A flaw exists in the IOCTL Handler component of Nixdorf Wincor PORT IO Driver, specifically within the sub 11100 function in the wnport.sys library. This issue leads to a stack-based buffer overflow, requiring local access for exploitation. The exploit details have been publicly disclosed.

Recommendations Upgrade to version 3.0.0.1 to resolve the issue.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-5555

Affected Products

Nixdorf Wincor Port Io Driver

Wnport.Sys

References · 8

• 🔥 https://b.iakb.org/2025/06/26/Wincor-Nixdorf-PORT-IO-Driver-Buffer-Overflow · Exploit
• https://download.dieboldnixdorf.com · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-5555 · Security Note
• https://vuldb.com/?ctiid.329013 · Note
• https://vuldb.com/?id.329013 · Note
• https://twitter.com/CVEnew/status/1979468392588611897 · Twitter Post
• https://t.me/CVEtracker/35275 · Telegram Post
• https://vuldb.com/?submit.604823 · Note