CVE 8.5 HIGH

Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow_CVE-2025-5555

8.5 / 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0.1 is able to mitigate this issue. Upgrading the affected component is recommended. The vendor was contacted beforehand and was able to provide a patch very early.

Basic Information

ID CVE-2025-5555
Source VulDB
Published Oct 18, 2025 at 08:02

Affected Product

Vendor Nixdorf Wincor
Product PORT IO Driver
Version 1.0.0.0
Affected Versions Nixdorf Wincor PORT IO Driver 1.0.0.0
Nixdorf Wincor PORT IO Driver 1.0.0.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.