Dell Wyse Thinos vulnerabilities

10 CVEs affecting Dell Wyse Thinos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-42427, published 2024-09-10.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-29491, published 2021-01-04. High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days. Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the…
• CVE-2020-29492, published 2021-01-04. Critical severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days. Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable…
• CVE-2024-42427, published 2024-09-10. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access…
• CVE-2022-34402, published 2022-10-10. Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service.
• CVE-2021-21598, published 2021-08-10. Low severity, CVSS 3.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this…
• CVE-2021-21597, published 2021-08-10. Low severity, CVSS 3.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read…
• CVE-2021-21532, published 2021-04-02. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management…
• CVE-2023-32455, published 2023-07-20. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this…
• CVE-2023-32447, published 2023-07-20. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read…
• CVE-2023-32446, published 2023-07-20. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this…