CVE-2011-1672: Dell KACE k2000 Systems Deployment Appliance

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.

Affected products

• Dell KACE k2000 Systems Deployment Appliance: up to and including 3.3.36822

Published 2011-04-10. Last modified 2026-06-16.