CVE-2025-5555CWE-119CWE-121

CVE-2025-5555

High · published October 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

⚡ A local attacker only needs to manipulate memory to trigger a stack-based buffer overflow in the Nixdorf Wincor PORT IO Driver! Think of it like someone skillfully stacking blocks. If they push the wrong block at the right moment, the whole tower could come crashing down. In this case, the function sub_11100 is that critical block, vulnerable to a sneaky push! This vulnerability allows local attackers to potentially gain higher privileges and execute arbitrary code, leading to a catastrophic system takeover. With this stack overflow, they could crash services, access sensitive data, or even take complete control of the system. It's a high-stakes game of trust that can have devastating consequences!

Put simply

Think of it like someone skillfully stacking blocks. If they push the wrong block at the right moment, the whole tower could come crashing down. In this case, the function sub_11100 is that critical block, vulnerable to a sneaky push! The vulnerability is located in the IOCTL Handler of the wnport.sys library, specifically in function sub_11100, which is susceptible to a stack-based buffer overflow due to improper handling of input data.

What to do

This vulnerability allows local attackers to potentially gain higher privileges and execute arbitrary code, leading to a catastrophic system takeover. With this stack overflow, they could crash services, access sensitive data, or even take complete control of the system. It's a high-stakes game of trust that can have devastating consequences! To mitigate this issue, upgrade the Nixdorf Wincor PORT IO Driver to version 3.0.0.1 immediately. Ensure that you regularly audit and patch your systems to avoid future vulnerabilities and keep an eye on communications from the vendor for timely updates. Stay proactive! You've got this! Follow these steps and you’ll be well on your way to securing your systems! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-10-18T12:15Z
References (5)
EPSS history
Timeline
  • 18 OCT 08:02Z
    Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow
    cvelistv5