PT-2022-15886
CVE-2022-23158
·
Published
2022-04-01
·
Updated
2022-04-08
Description by
CVSS 3.1
6.0
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Wyse Device Agent versions 14.6.1.4 and below
Description
The issue allows a local authenticated user with standard privilege to potentially exploit it, providing incorrect port information and getting connected to a valid WMS server. This is a sensitive data exposure issue.
Recommendations
For Wyse Device Agent versions 14.6.1.4 and below, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾