First published: Mon Jul 18 2022(Updated: )
Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell Wyse Management Suite | <3.8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-33924 is an Improper Access control vulnerability in Dell Wyse Management Suite 3.6.1 and below that allows an attacker with no access to create rules to potentially exploit the vulnerability and create rules.
The severity of CVE-2022-33924 is medium with a severity value of 5.3.
CVE-2022-33924 affects Dell Wyse Management Suite version 3.6.1 and below by introducing an Improper Access control vulnerability.
An attacker with no access to create rules can potentially exploit CVE-2022-33924 by taking advantage of the Improper Access control vulnerability in Dell Wyse Management Suite 3.6.1 and below.
Yes, a security update has been released by Dell to address the vulnerabilities including CVE-2022-33924. Please refer to the Dell support page for more information.