DSA-2021-144: Dell Wyse ThinOS Security Update for Multiple Vulnerabilities

Resumo: Dell Wyse ThinOS (9.x) remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.

Impacto

High

Dados

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2021-21597 Dell Wyse ThinOS (9.x), version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system may exploit this vulnerability to read sensitive information written to the log files. 7.2 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2021-21598 Dell Wyse ThinOS (9.x), versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system may exploit this vulnerability to read sensitive Smartcard data in log files. 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2021-21597 Dell Wyse ThinOS (9.x), version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system may exploit this vulnerability to read sensitive information written to the log files. 7.2 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2021-21598 Dell Wyse ThinOS (9.x), versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system may exploit this vulnerability to read sensitive Smartcard data in log files. 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

Product Affected Versions Updated versions Link to update
Dell Wyse 3040 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 3040 Thin Client
Dell Wyse 3040 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 3040 Thin Client with PCoIP
Dell Wyse 5070 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5070 Thin Client
Dell Wyse 5470 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5470 Thin Client
Dell Wyse 5470 All-in-One Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5470 All-in-One Thin Client
Dell Wyse 5070 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5070 Thin Client with PCoIP
Dell Wyse 5470 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5470 Thin Client with PCoIP
Dell Wyse 5470 All-in-One Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5470 All-in-One Thin Client with PCoIP
Product Affected Versions Updated versions Link to update
Dell Wyse 3040 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 3040 Thin Client
Dell Wyse 3040 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 3040 Thin Client with PCoIP
Dell Wyse 5070 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5070 Thin Client
Dell Wyse 5470 Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5470 Thin Client
Dell Wyse 5470 All-in-One Thin Client 9.0, 9.1 9.1 MR3 Dell Wyse 5470 All-in-One Thin Client
Dell Wyse 5070 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5070 Thin Client with PCoIP
Dell Wyse 5470 Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5470 Thin Client with PCoIP
Dell Wyse 5470 All-in-One Thin Client with PCoIP 9.0, 9.1 9.1 MR3 Dell Wyse 5470 All-in-One Thin Client with PCoIP

Histórico de revisão

RevisionDateDescription
1.02021-07-21Initial Release

Informações relacionadas

Produtos afetados

Product Security Information, Dell ThinOS
Propriedades do artigo
Número do artigo: 000189543
Tipo de artigo: Dell Security Advisory
Último modificado: 18 set. 2025
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.