Lucene search
+L

238 matches found

OSV
OSV
added 2021/08/10 7:15 p.m.7 views

CVE-2021-21597

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files...

3.9CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/10 7:15 p.m.12 views

Information disclosure

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files...

2.1CVSS3.7AI score0.0025EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/08/10 7:15 p.m.16 views

Information disclosure

Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files...

2.1CVSS3.9AI score0.0025EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/08/10 7:5 p.m.47 views

CVE-2021-21598

Dell Wyse ThinOS exposes a Sensitive Information Disclosure via log data for authenticated users with physical access, affecting versions 9.0, 9.1, and 9.1 MR1. The vulnerability enables reading smartcard data from log files. Root cause details are not fully provided in the documents; no remediat...

3.9CVSS3.8AI score0.0025EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/10 7:5 p.m.33 views

CVE-2021-21598

Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files...

3.9CVSS4.1AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/10 7:5 p.m.41 views

CVE-2021-21597

CVE-2021-21597 affects Dell Wyse ThinOS 9.0. An authenticated user with physical access can read sensitive information written to log files, per multiple connected sources (NVD/CNVD/CVE records). The vulnerability is described as an information disclosure without details on exploit steps or affec...

7.2CVSS3.6AI score0.0025EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/10 7:5 p.m.15 views

CVE-2021-21597

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files...

7.2CVSS6.6AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.6 views

Dell Wyse ThinOS 日志信息泄露漏洞

Wyse ThinOS is a specialized operating system for Dell servers from Dell Inc. in the United States. A security vulnerability exists in Wyse ThinOS, which arises from an authenticated attacker with physical access to the system being able to read sensitive smart card data in log files...

3.9CVSS5.1AI score0.0025EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.4 views

Dell Wyse ThinOS 日志信息泄露漏洞

Wyse ThinOS is a proprietary operating system for Dell servers from Dell, Inc. An information disclosure vulnerability exists in Wyse ThinOS 9.0, which stems from the fact that a malicious user with physical access to the system and who has been authenticated can read sensitive information writte...

7.2CVSS5.4AI score0.0025EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/04/21 12:0 a.m.6 views

DELL Wyse ThinOS Input Validation Error Vulnerability

DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An input validation error vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to alter device configurati...

6.3CVSS6.9AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/02 10:15 p.m.5 views

CVE-2021-21532

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...

6.3CVSS6.6AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/02 10:15 p.m.22 views

CVE-2021-21532

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...

6.3CVSS0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/02 10:15 p.m.17 views

Input validation

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...

5.8CVSS6.2AI score0.00216EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/02 9:20 p.m.22 views

CVE-2021-21532

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...

5CVSS6.5AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/02 9:20 p.m.86 views

CVE-2021-21532

Dell Wyse ThinOS 8.6 MR9 is affected by CVE-2021-21532 due to an improper management server validation that could allow redirection to an attacker-controlled management server to alter device configuration or certificate files. Public documents indicate the issue is mitigated by the 8.6 MR9 secur...

6.3CVSS6.2AI score0.00216EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/02 12:0 a.m.6 views

Dell Wyse ThinOS 输入验证错误漏洞

DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An input validation error vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to alter device configurati...

6.3CVSS5.7AI score0.00216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/04/02 12:0 a.m.8 views

PT-2021-14582 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 8.6 MR9 Description: The issue is related to an improper management server validation that could be exploited to redirect a client to an attacker-controlled management server. This could allow the attacker t...

6.3CVSS6.2AI score0.00216EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/01/05 12:0 a.m.13 views

Wyse ThinOS Insecure Default Configuration Vulnerability (CNVD-2021-02362)

Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...

10CVSS6.2AI score0.01848EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/05 12:0 a.m.34 views

Wyse ThinOS Licensing Issues Vulnerability

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS 8.6 and prior versions, which can be exploited by an attacker to access writable files and manipulate the configuration of any targeted specific site...

10CVSS6.8AI score0.01736EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/04 10:15 p.m.32 views

CVE-2020-29492

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...

10CVSS9.6AI score0.01736EPSS
SaveExploits0References1
Rows per page
Query Builder