Kace K2000 Systems Deployment Appliance
Approved changes feed: RSS · Atom
cpe:2.3:h:dell:kace_k2000_systems_deployment_appliance:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Kace K2000 Systems Deployment Appliance (bdd43d37-d59b-55d5-a977-c1760300e9b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4436 |
vulnerable | 2026-06-08 04:59:31.082058 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-11-12T00:00:00.000Z
Updated: 2024-09-17T03:03:29.362Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4048 |
vulnerable | 2026-06-08 04:59:28.871866 |
Details available
The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.
Published: 2011-11-12T00:00:00.000Z
Updated: 2024-08-06T23:53:32.601Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4047 |
vulnerable | 2026-06-08 04:59:28.871469 |
Details available
The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.
Published: 2011-11-12T00:00:00.000Z
Updated: 2024-09-17T02:17:03.437Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4046 |
vulnerable | 2026-06-08 04:59:28.870806 |
Details available
The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.
Published: 2011-11-12T00:00:00.000Z
Updated: 2024-09-16T20:42:17.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1672 |
vulnerable | 2026-06-08 04:58:01.292739 |
Details available
The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.
Published: 2011-04-10T01:29:00.000Z
Updated: 2024-08-06T22:37:25.758Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.