Vulnerability · Published Oct 6, 2024 · Assigned by INCD

CVE-2024-45246Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

High 7.3

In plain English

A high-severity uncontrolled search path in Vynamic View prior to v5.9.5 from Diebold Nixdorf. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 93.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

Affected products (as reported)

VendorProductVersions
Diebold Nixdorf Vynamic View prior to v5.9.5 All versions – before Upgrade to v5.9.5 or greater

Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References