High 7.8Published Oct 18, 2025

CVE-2025-5555Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow

Updated under an hour ago (Oct 26, 2026, 8:40 PM ET)

Does this affect you?

It affects Nixdorf Wincor PORT IO Driver. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Nixdorf Wincor PORT IO Driver

Exploited in the last 30 days

A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0.1 is able to mitigate this issue. Upgrading the affected component is recommended. The vendor was contacted beforehand and was able to provide a patch very early.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Weakness (CWE): CWE-121, CWE-119
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Deferred
Record last updated: Oct 20, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Nixdorf Wincor PORT IO Driver nixdorf_wincor:port_io_driver (from the name)	1.0.0.0; 1.0.0.1; 3.0.0.1 not affected	CNA record

References

References

https://vuldb.com/?id.329013	vdb-entry, technical-description
https://vuldb.com/?ctiid.329013	signature, permissions-required
https://vuldb.com/?submit.604823	third-party-advisory
https://b.iakb.org/2025/06/26/Wincor-Nixdorf-PORT-IO-Driver-Buffer-Overflow/	broken-link, exploit
https://download.dieboldnixdorf.com/	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.