6.0
Medium
CVE-2022-23156 Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability
Description
Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Wyse Device Agent 14.6 | earliest → < 14.6.2.13 | 14.6.2.13 |
Other CVEs of Dell Wyse Device Agent
The 4 CVEs of Dell Wyse Device Agent →
CVE-2022-23158
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
6.0
Medium
CVE-2022-23157
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
4.4
Medium
CVE-2021-36341
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability
5.5
Medium