Approved changes feed: RSS · Atom

cpe:2.3:a:dell:wyse_device_manager:4.7.1:*:*:*:*:*:*:*

part: a version: 4.7.1 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductWyse Device Manager (6f765c63-0db6-5814-8c58-6033cdaeceef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0695 vulnerable 2026-06-08 04:51:10.917649 Details available
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-17T02:31:30.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0693 vulnerable 2026-06-08 04:51:10.916655 Details available
Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-16T19:25:41.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.