CVE-2009-0693

2022-10-0316:24:10

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-0693

buffer overflow

remote code execution

wyse device manager

wdm 4.7.x

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.2%

JSON

Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.

Affected configurations

NVD

Node

dellwyse_device_managerMatch4.7.0

dellwyse_device_managerMatch4.7.1

dellwyse_device_managerMatch4.7.2

CPENameOperatorVersion
dell:wyse_device_managerdell wyse device managereq4.7.0
dell:wyse_device_managerdell wyse device managereq4.7.1
dell:wyse_device_managerdell wyse device managereq4.7.2

CPE	Name	Operator	Version
dell:wyse_device_manager	dell wyse device manager	eq	4.7.0
dell:wyse_device_manager	dell wyse device manager	eq	4.7.1
dell:wyse_device_manager	dell wyse device manager	eq	4.7.2