Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-21532

Опубликовано: 02 апр. 2021
Источник: nvd
CVSS3: 5
CVSS3: 6.3
CVSS2: 5.8
EPSS Низкий

Описание

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:dell:wyse_thinos:*:*:*:*:*:*:*:*
Версия до 8.6 (исключая)
cpe:2.3:o:dell:wyse_thinos:8.6:-:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00052
Низкий

5 Medium

CVSS3

6.3 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-16
CWE-20

Связанные уязвимости

CVSS3: 6.3
github
больше 3 лет назад

Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file.

EPSS

Процентиль: 16%
0.00052
Низкий

5 Medium

CVSS3

6.3 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-16
CWE-20