DSA-2024-440: Security Update for Dell Wyse Management Suite (WMS) for Multiple Vulnerabilities
Samenvatting: Dell Wyse Management Suite (WMS) remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
| Third-party Component |
CVEs |
More Information |
| MongoDB |
CVE-2024-7553 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/
|
| Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
| CVE-2024-49595 |
Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.6
|
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
|
| CVE-2024-49597 |
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.6 |
|
| CVE-2024-49596 |
Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion |
5.9 |
| Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
| CVE-2024-49595 |
Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.6
|
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
|
| CVE-2024-49597 |
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.6 |
|
| CVE-2024-49596 |
Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion |
5.9 |
Getroffen producten en herstel
| CVEs addressed |
Product |
Affected Versions |
Remediated Versions |
Release Date |
Link |
| CVE-2024-7553, CVE-2024-49595, CVE-2024-49597, CVE-2024-49596 |
Dell Wyse Management Suite |
Versions 4.4 and prior
|
Versions 4.4.1 or later |
11/25/2024 |
|
| CVE-2024-49596 |
Dell Wyse Management Suite Repository |
Versions 4.4 and prior
|
Versions 4.4.1 or later |
11/25/2024 |
| CVEs addressed |
Product |
Affected Versions |
Remediated Versions |
Release Date |
Link |
| CVE-2024-7553, CVE-2024-49595, CVE-2024-49597, CVE-2024-49596 |
Dell Wyse Management Suite |
Versions 4.4 and prior
|
Versions 4.4.1 or later |
11/25/2024 |
|
| CVE-2024-49596 |
Dell Wyse Management Suite Repository |
Versions 4.4 and prior
|
Versions 4.4.1 or later |
11/25/2024 |
Tijdelijke oplossingen en risicobeperking
None
Revisiegeschiedenis
|
Revision |
Date |
Description |
|
1.0 |
2024-11-25 |
Initial Release |
|
2.0 |
2024-11-26 |
Updated for enhancements to presentation with no change in content. |
Bevestigingen
CVE-2024-49596: Dell Technologies would like to thank Ahmed Y. Elmogy for reporting this issue.
CVE-2024-49595: Dell Technologies would like to thank Harm Blankers, Jasper Westerman, Yanick de Pater of REQON B.V. for reporting this issue.
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
Wyse Management SuiteArtikeleigenschappen
Artikelnummer: 000244453
Artikeltype: Dell Security Advisory
Laatst aangepast: 26 nov. 2024
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.