Dell Wyse Thinos vulnerabilities
10 vulnerabilities
Known vulnerabilities in Dell Wyse Thinos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-21597dellwyse_thinos
EPSS score0.25%
Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files.CVE-2021-21532dellwyse proprietary os (thinos)+1EPSS score0.22%
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file.CVE-2021-21598dellwyse_thinosEPSS score0.25%
Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files.CVE-2020-29491dellwyse proprietary os (thinos)+1EPSS score1.82%
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients.CVE-2020-29492dellwyse proprietary os (thinos)+1EPSS score1.71%
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station.CVE-2022-34402dellwyse proprietary os (modern thinos)+1EPSS score0.70%
Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service.CVE-2024-42427dellwyse proprietary os (modern thinos)+1EPSS score1.07%
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.CVE-2023-32447dellwyse proprietary os (modern thinos)+1EPSS score0.12%
Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.CVE-2023-32455dellwyse proprietary os (modern thinos)+1EPSS score0.12%
Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.CVE-2023-32446dellwyse proprietary os (modern thinos)+1EPSS score0.12%
Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.