CVE-2009-0695: Dell Wyse Device Manager

High severity, CVSS 7.5. EPSS: 68.9% chance of exploitation in the next 30 days.

hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.

Affected products

• Dell Wyse Device Manager: version 4.7.0 only; version 4.7.1 only; version 4.7.2 only

Published 2012-06-19. Last modified 2026-06-16.