PT-2024-8791 · Dell · Dell Wyse Management Suite

·

CVE-2024-49595

·

تاريخ النشر

2024-11-25

·

تاريخ التحديث

2024-12-01

CVSS v3.1

7.6

عالية

المتجهAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions WMS 4.4 and before
Description: The issue is related to an authentication bypass vulnerability in the Dell Wyse Management Suite, which could allow a remote attacker to cause a denial of service. A high-privileged attacker with remote access could potentially exploit this vulnerability. The vulnerability is described as an Authentication Bypass by Capture-replay.
Recommendations: For versions WMS 4.4 and before, consider disabling remote access until a patch is available to prevent potential exploitation of the authentication bypass vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2024-10423
CVE-2024-49595

المنتجات المتأثرة

Dell Wyse Management Suite