CVE-2023-24062

MEDIUM Year: 2023
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-20
View all →

Vulnerability Description

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.

Related Vulnerabilities

CVE-2015-1928

MEDIUM
CVSS:6.8(Medium)

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQ...

CWE-202015

CVE-2015-8373

MEDIUM
CVSS:6.8(Medium)

The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packet...

CWE-202015

CVE-2016-0774

MEDIUM
CVSS:6.8(Medium)

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-2...

CWE-202016

CVE-2016-1563

MEDIUM
CVSS:6.8(Medium)

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CWE-202016

CVE-2016-2088

MEDIUM
CVSS:6.8(Medium)

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed p...

CWE-202016

CVE-2016-2270

MEDIUM
CVSS:6.8(Medium)

Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.

CWE-202016