CVE-2024-42423

The CVE-2024-42423 entry concerns Citrix Workspace App 23.9.0.24.4 on Dell ThinOS 2311 with an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local, unauthenticated user with low privileges could bypass controls, potentially leading to information disclosure and ...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-42427

CVE-2024-42427 affects Dell ThinOS 2402 and 2405. It is an Improper Neutralization of Special Elements in a Command (Command Injection) vulnerability that could allow an unauthenticated attacker with physical access to gain elevation of privileges. The connected sources confirm the issue and its ...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-42427

Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2024-29941 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions 2402 and 2405 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. An unauthenticated attacker with physical access coul...

PT-2024-29938 · Dell +1 · Dell Thinos +1

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 Description: The issue is related to an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potential...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS that originates from a misauthorization when enabling Citrix CEB for WebLogin. A local, unauthenticated, low-privileged user could use this vulnerability to bypass existing controls and perform...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS that originates from the inclusion of a command injection. Exploitation of this vulnerability by an unauthenticated attacker with physical access could result in elevated privileges...

CVE-2024-30472

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure...

CVE-2024-30472

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure...

CVE-2024-30472

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure...

CVE-2024-30472

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure...

CVE-2024-30472

CVE-2024-30472 affects Telemetry Dashboard v1.0.0.8 on Dell ThinOS 2402. The vulnerability allows an unauthenticated, locally present attacker to disclose sensitive information. The available documents do not provide exploit details or a confirmed fix. Some sources indicate there is no informatio...

PT-2024-23401 · Dell · Telemetry Dashboard

Name of the Vulnerable Software and Affected Versions: Telemetry Dashboard version 1.0.0.8 for Dell ThinOS 2402 Description: The issue concerns a sensitive information disclosure vulnerability. It can be exploited by an unauthenticated user with local access to the device, potentially leading to...

Dell ThinOS Information Disclosure Vulnerability

Dell ThinOS is a client operating system from Dell USA. An information disclosure vulnerability exists in Dell ThinOS 2402 Telemetry Dashboard v1.0.0.8, which originates from allowing an unauthenticated user with local access to the device to disclose information...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...