CVE-2025-5555
Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow
- State
- Published
- Severity
- 8.5 High
- Published
- Oct 18, 2025
- Updated
- Oct 20, 2025
- Reserved
- Jun 3, 2025
Description
A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0.1 is able to mitigate this issue. Upgrading the affected component is recommended. The vendor was contacted beforehand and was able to provide a patch very early.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
PORT IO DriverNixdorf Wincor |
|
References
- VDB-329013 | Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflowvdb-entrytechnical-description
- VDB-329013 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #604823 | Wincor Nixdorf Wincor Nixdorf PORT IO Driver <=1.0.0.1 Buffer Overflowthird-party-advisory
- https://b.iakb.org/2025/06/26/Wincor-Nixdorf-PORT-IO-Driver-Buffer-Overflow/broken-linkexploit
- https://download.dieboldnixdorf.com/patch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.