CVE-2025-70616
中文标题:
（暂无数据）
英文标题:
A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (versi
漏洞描述
中文描述:
（暂无数据）
英文描述:
A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer (Src[40]) using memmove. An attacker with local access can exploit this vulnerability by sending a crafted IOCTL request with Options > 40, causing a stack buffer overflow that may lead to kernel code execution, local privilege escalation, or denial of service (system crash). Additionally, the same IOCTL handler can leak kernel addresses and other sensitive stack data when reading beyond the buffer boundaries.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| dieboldnixdorf | wnbios64.sys | 1.2.0.0 | - | - |
cpe:2.3:a:dieboldnixdorf:wnbios64.sys:1.2.0.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
nvd.nist.gov
CVSS评分详情
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| NVD | nvd_CVE-2025-70616 |
2026-03-06 02:00:04 | 2026-03-05 22:00:01 |
版本与语言
安全公告
变更历史
查看详细变更
- affected_products_count: 0 -> 1
查看详细变更
- severity: SeverityLevel.UNKNOWN -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.8
- cvss_vector: 未提取 -> CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- cvss_version: 未提取 -> 3.1