6.0
Medium
CVE-2022-23158 Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
Description
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Wyse Device Agent 14.6 | earliest → < 14.6.2.13 | 14.6.2.13 |
Other CVEs of Dell Wyse Device Agent
The 4 CVEs of Dell Wyse Device Agent →
CVE-2022-23157
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
4.4
Medium
CVE-2022-23156
Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability
6.0
Medium
CVE-2021-36341
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability
5.5
Medium