CVE-2018-11063: High severity dell wyse management suite vulnerability
Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary executables with elevated privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-11063?
CVE-2018-11063 is a vulnerability found in Dell WMS versions 1.1 and prior that allows a low-privileged local user to execute arbitrary code.
How does CVE-2018-11063 impact Dell Wyse Management Suite?
CVE-2018-11063 impacts Dell Wyse Management Suite versions 1.1 and prior by allowing a low-privileged local user to execute arbitrary code.
What is the severity of CVE-2018-11063?
The severity of CVE-2018-11063 is rated as high with a CVSS score of 7.8.
How can I fix the vulnerability CVE-2018-11063?
To fix the vulnerability CVE-2018-11063, users should update their Dell Wyse Management Suite software to a version higher than 1.1 and implement proper quoting of service paths.
Where can I find more information about CVE-2018-11063?
You can find more information about CVE-2018-11063 on the Dell support website at the following link: [Dell Wyse Management Suite Multiple Unquoted Service Path Vulnerabilities](https://www.dell.com/support/article/us/en/19/sln313398/dell-wyse-management-suite-multiple-unquoted-service-path-vulnerabilities?lang=en).