355 matches found
CVE-2021-21532
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
CVE-2021-21532
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
Input validation
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
CVE-2021-21532
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
CVE-2021-21532
Dell Wyse ThinOS 8.6 MR9 is affected by CVE-2021-21532 due to an improper management server validation that could allow redirection to an attacker-controlled management server to alter device configuration or certificate files. Public documents indicate the issue is mitigated by the 8.6 MR9 secur...
PT-2021-14582 · Dell · Dell Wyse Thinos
Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 8.6 MR9 Description: The issue is related to an improper management server validation that could be exploited to redirect a client to an attacker-controlled management server. This could allow the attacker t...
Dell Wyse ThinOS 输入验证错误漏洞
DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An input validation error vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to alter device configurati...
CVE-2021-21532: Improper Input Validation
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
CVE-2021-21532
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file...
Wyse ThinOS Insecure Default Configuration Vulnerability (CNVD-2021-02362)
Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...
Wyse ThinOS Licensing Issues Vulnerability
Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS 8.6 and prior versions, which can be exploited by an attacker to access writable files and manipulate the configuration of any targeted specific site...
CVE-2020-29492
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...
CVE-2020-29491
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...
CVE-2020-29492
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...
Default configuration
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...
Default configuration
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...
CVE-2020-29492
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...
CVE-2020-29492
Dell Wyse ThinOS 8.6 and earlier are affected by two insecurities (CVE-2020-29491, CVE-2020-29492) stemming from an unprotected FTP server used to fetch configurations. Attackers on the same network could read and then alter INI configuration files, enabling read/write access to device settings a...
CVE-2020-29491
CVE-2020-29491 affects Dell Wyse ThinOS v8.6 and earlier, arising from unauthenticated FTP access to a local configuration/INI server. This allows remote readers and, potentially, writers to access or modify per-device configuration files on the network, which may expose credentials and enable fu...
CVE-2020-29491
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...