CVE-2011-4046

The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext inside a PHP script, enabling context-dependent attackers to read sensitive data from script source. Several connected sources corroborate that this flaw can lead to privilege abuse and unauthorized ...

CVE-2011-4048

Dell KACE K2000 System Deployment Appliance is affected by CVE-2011-4048 due to a default username/password for the read-only reporting account, enabling remote attackers to access the database and obtain sensitive information. The issue is described in multiple sources referencing default creden...

CVE-2011-4436

Dell KACE K2000 System Deployment Appliance – the admin web interface is affected by multiple cross-site scripting (XSS) vulnerabilities, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The connected documents confirm the same CVE in NVD/Red Hat/Nessus entries, ...

CVE-2011-4047

CVE-2011-4047 affects the Dell KACE K2000 System Deployment Appliance. The issue allows remote attackers to execute arbitrary commands by exploiting write access to the appliance’s database, enabling command execution on the target system. The vulnerability is tied to remote database access and i...

CVE-2011-1672

Dell KACE K2000 Systems Deployment Appliance, versions 3.3.36822 and earlier, exposes a hidden CIFS share named 'peinst' that allows remote, unauthenticated attackers to read sensitive deployment data (unattend.xml and sysprep.inf), potentially exposing credentials. The vulnerability is documente...