DSA-2023-247: Dell ThinOS Security Update for Multiple Vulnerabilities
Samenvatting: Dell ThinOS remediation is available for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
Medium
Gegevens
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Getroffen producten en herstel
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
Revisiegeschiedenis
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-07-18 | Initial Release |
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
OptiPlex All-In-One, Latitude 3440, Latitude 5440, OptiPlex 3000 Thin Client, OptiPlex 5400 All-In-One, Wyse 3040 Thin Client, Wyse 5070 Thin Client, Wyse 5470 All-In-One, Wyse 5470Artikeleigenschappen
Artikelnummer: 000215864
Artikeltype: Dell Security Advisory
Laatst aangepast: 18 jul. 2023
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.