CVE-2023-32455
First published: Thu Jul 20 2023(Updated: )
Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.
Credit: security_alert@emc.com security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Wyse ThinOS | <=9.3.2102 | |
| Dell Latitude 3420 | ||
| Dell Latitude 3440 | ||
| Dell Latitude 5440 | ||
| Dell Optiplex 3000 Thin Client | ||
| Dell Optiplex 5400 | ||
| Dell Wyse 3040 Thin Client | ||
| Dell Wyse 5070 Thin Client | ||
| Dell Wyse 5470 All-in-one Thin Client | ||
| Dell Wyse 5470 Mobile Thin Client |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this Dell Wyse ThinOS vulnerability?
The vulnerability ID of this Dell Wyse ThinOS vulnerability is CVE-2023-32455.
What is the severity of CVE-2023-32455?
The severity of CVE-2023-32455 is medium with a severity value of 5.5.
What is the affected software of CVE-2023-32455?
The affected software of CVE-2023-32455 is Dell Wyse ThinOS versions prior to 2208 (9.3.2102).
How does CVE-2023-32455 vulnerability impact the affected software?
The CVE-2023-32455 vulnerability allows an unauthenticated malicious user with local access to the device to read sensitive information written to the log files.
How can I fix the CVE-2023-32455 vulnerability?
To fix the CVE-2023-32455 vulnerability, it is recommended to update Dell Wyse ThinOS to version 2208 (9.3.2102) or later.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell wyse thinos
- version/dell wyse thinos/9.3.2102
- canonical/dell latitude 3420
- canonical/dell latitude 3440
- canonical/dell latitude 5440
- canonical/dell optiplex 3000 thin client
- canonical/dell optiplex 5400
- canonical/dell wyse 3040 thin client
- canonical/dell wyse 5070 thin client
- canonical/dell wyse 5470 all-in-one thin client
- canonical/dell wyse 5470 mobile thin client