Dell KACE k2000 Systems Deployment Appliance vulnerabilities

5 CVEs affecting Dell KACE k2000 Systems Deployment Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4436, published 2011-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-4047, published 2011-11-12. High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days. The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.
CVE-2011-1672, published 2011-04-10. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or…
CVE-2011-4046, published 2011-11-12. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by…
CVE-2011-4048, published 2011-11-12. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information…
CVE-2011-4436, published 2011-11-12. Low severity, CVSS 3.5. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or…