DSA-2023-247: Dell ThinOS Security Update for Multiple Vulnerabilities
Summary: Dell ThinOS remediation is available for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system
Acest articol se aplică pentru
Acest articol nu se aplică pentru
Acest articol nu este legat de un produs specific.
Acest articol nu acoperă toate versiunile de produs existente.
Impact
Medium
Details
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32455 | Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32446 | Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2023-32447 | Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Produse afectate și măsuri de remediere
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
|---|---|---|---|
| Wyse 3040 Thin Client | 2208 (9.3.2102) and below (CVE-2023-32455) 2303 (9.4.1141) (CVE-2023-32446) 2303(9.4.1141) and below (CVE-2023-32447) |
2306 (9.4.2103) |
Dell Wyse ThinOS |
| Wyse 5070 Thin Client | |||
| Wyse 5470 Mobile Thin Client | |||
| Wyse 5470 All-in-One Thin Client | |||
| Dell OptiPlex 3000 Thin Client | |||
| Dell Latitude 3420 | |||
| Dell OptiPlex 5400 All-in-One | |||
| Dell Latitude 3440 | |||
| Dell Latitude 5440 | |||
| Dell OptiPlex All-in-One |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-07-18 | Initial Release |
Related Information
Exonerare de răspundere
Produse afectate
OptiPlex All-In-One, Latitude 3440, Latitude 5440, OptiPlex 3000 Thin Client, OptiPlex 5400 All-In-One, Wyse 3040 Thin Client, Wyse 5070 Thin Client, Wyse 5470 All-In-One, Wyse 5470Proprietăți articol
Article Number: 000215864
Article Type: Dell Security Advisory
Ultima modificare: 18 Jul 2023
Găsiți răspunsuri la întrebările dvs. de la alți utilizatori Dell
Servicii de asistență
Verificați dacă dispozitivul dvs. este acoperit de serviciile de asistență.