PT-2022-19407 · Dell · Dell Wyse Management Suite

Published 2022-08-10 · Updated 2022-08-12 · CVE-2022-29090

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions 3.6.1 and below

Description The issue allows a low privileged malicious user to potentially exploit it and obtain credentials. The attacker may use the exposed credentials to access the target device and perform unauthorized actions.

Recommendations For versions 3.6.1 and below, update to a version above 3.6.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-317

CWE-312

Related Identifiers

CVE-2022-29090

Affected Products

Dell Wyse Management Suite

References · 4

• https://osv.dev/vulnerability/CVE-2022-29090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29090 · Security Note
• https://dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://t.me/cibsecurity/47865 · Telegram Post