Dell Wyse Device Manager vulnerabilities

2 CVEs affecting Dell Wyse Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0695, published 2012-06-19.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0695, published 2012-06-19. High severity, CVSS 7.5. EPSS: 68.9% chance of exploitation in the next 30 days. hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52…
• CVE-2009-0693, published 2012-06-19. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.