CVE-2023-32447: Medium severity dell wyse thinos vulnerability

Q: What is CVE-2023-32447?

CVE-2023-32447 is a vulnerability in Dell Wyse ThinOS versions prior to 2306 (9.4.2103) that allows a local malicious user to read sensitive information from log files.

Q: How severe is CVE-2023-32447?

The severity of CVE-2023-32447 is medium, with a severity value of 5.5.

Q: Which software versions are affected by CVE-2023-32447?

Dell Wyse ThinOS versions prior to 2306 (9.4.2103) are affected by CVE-2023-32447.

Q: How can a malicious user exploit CVE-2023-32447?

A malicious user with local access to the device can exploit CVE-2023-32447 to read sensitive information written to the log files.

Q: Is there a fix for CVE-2023-32447?

Yes, Dell has released a fix for CVE-2023-32447. Please refer to the reference link for more information.

Published Jul 20, 2023

Updated

Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.

Affected Software

10 affected components

Dell Wyse ThinOS<9.4.2103

Dell Latitude 3420

Dell Latitude 3440

Dell Latitude 5440

Dell Optiplex 3000 Thin Client

Dell Optiplex 5400

Dell Wyse 3040 Thin Client

Dell Wyse 5070 Thin Client

Dell Wyse 5470 All-in-one Thin Client

Dell Wyse 5470 Mobile Thin Client

Event History

Jul 20, 2023

CVE Published

via MITRE·12:55 PM

Data Sourced

via MITRE·12:55 PM

DescriptionSeverityWeakness

Data Sourced

01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-32447?

CVE-2023-32447 is a vulnerability in Dell Wyse ThinOS versions prior to 2306 (9.4.2103) that allows a local malicious user to read sensitive information from log files.

How severe is CVE-2023-32447?

The severity of CVE-2023-32447 is medium, with a severity value of 5.5.

Which software versions are affected by CVE-2023-32447?