PT-2021-14600 · Dell · Dell Wyse Windows Embedded System

Alessandro Baldini + 1 · Published 2021-05-21 · Updated 2022-04-26 · CVE-2021-21552

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier

Description The issue is related to an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this to bypass the restricted environment and perform unauthorized actions on the affected system.

Recommendations For Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-21552

Affected Products

Dell Wyse Windows Embedded System

References · 3

• https://dell.com/support/kbdoc/en-us/000186134/dsa-2021-096-dell-wyse-windows-embedded-system-security-update-for-an-improper-authorization-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21552 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21552 · Security Note