Approved changes feed: RSS · Atom

cpe:2.3:a:dell:wyse_device_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductWyse Device Agent (51a78a35-dc04-5585-814c-aef001c2d432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23158 vulnerable 2026-06-08 05:40:56.518608 Details available
MEDIUM (6)
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server
Published: 2022-04-01T20:00:35.187Z
Updated: 2024-09-16T19:30:12.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23157 vulnerable 2026-06-08 05:40:56.518149 Details available
MEDIUM (4.4)
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious user could potentially exploit this vulnerability in order to view sensitive information from the WMS Server.
Published: 2022-04-01T20:00:33.901Z
Updated: 2024-09-16T20:16:53.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23156 vulnerable 2026-06-08 05:40:56.517715 Details available
MEDIUM (6)
Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server.
Published: 2022-04-01T20:00:32.496Z
Updated: 2024-09-16T18:34:23.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36341 vulnerable 2026-06-08 05:32:51.524107 Details available
MEDIUM (5.5)
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information.
Published: 2021-12-21T17:05:29.215Z
Updated: 2024-09-16T16:22:44.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3712 vulnerable 2026-06-08 05:13:55.411563 DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability
HIGH (8.2)
Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.
Published: 2019-03-07T19:00:00.000Z
Updated: 2024-09-17T03:12:51.680Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.