CVE-2024-49595

CWE-2943 documents3 sources
Severity
4.9MEDIUM
EPSS
0.0%
top 98.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Wyse Management Suite
Timeline
PublishedNov 26

Description

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:LExploitability: 2.3 | Impact: 4.7

Affected Packages2 packages

▶CVEListV5dell/wyse_management_suiteN/A — 4.4

🔴Vulnerability Details

2
CVEList
CVE-2024-49595: Dell Wyse Management Suite, version WMS 4↗2024-11-26
▶
GHSA
GHSA-7wfp-r36g-m8hf: Dell Wyse Management Suite, version WMS 4↗2024-11-26
▶
CVE-2024-49595 (MEDIUM CVSS 4.9) | Dell Wyse Management Suite | cvebase.io