DSA-2023-247: Dell ThinOS Security Update for Multiple Vulnerabilities
Summary: Dell ThinOS remediation is available for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system
Αυτό το άρθρο ισχύει για
Αυτό το άρθρο δεν ισχύει για
Αυτό το άρθρο δεν συνδέεται με κάποιο συγκεκριμένο προϊόν.
Δεν προσδιορίζονται όλες οι εκδόσεις προϊόντων σε αυτό το άρθρο.
Impact
Medium
Details
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Επηρεαζόμενα προϊόντα και αποκατάσταση
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-07-18 | Initial Release |
Related Information
Νομική αποποίηση ευθύνης
Επηρεαζόμενα προϊόντα
OptiPlex All-In-One, Latitude 3440, Latitude 5440, OptiPlex 3000 Thin Client, OptiPlex 5400 All-In-One, Wyse 3040 Thin Client, Wyse 5070 Thin Client, Wyse 5470 All-In-One, Wyse 5470Ιδιότητες άρθρου
Article Number: 000215864
Article Type: Dell Security Advisory
Τελευταία τροποποίηση: 18 Ιουλ 2023
Βρείτε απαντήσεις στις ερωτήσεις σας από άλλους χρήστες της Dell
Υπηρεσίες υποστήριξης
Ελέγξτε αν η συσκευή σας καλύπτεται από τις Υπηρεσίες υποστήριξης.