CVE-2025-5555
Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow
HIGH 7.1EPSS 0.2%
A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0.1 is able to mitigate this issue. Upgrading the affected component is recommended. The vendor was contacted beforehand and was able to provide a patch very early.
- Affected
- Nixdorf Wincor · PORT IO Driver
- CVSS v4.0 VULDB
- 7.1 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 VULDB
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 VULDB
- 6.8 MEDIUM
AV:L/AC:L/Au:S/C:C/I:C/A:C - EPSS
- 0.23% chance of exploitation in the next 30 days, 13th percentile
- Published
- 2025-10-18
- Updated
- 2025-10-20