Dell

Kace K2000 Systems Deployment Appliance

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-4046

  • EPSS 1.34%
  • Veröffentlicht 12.11.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:34:20

The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.

9.3

CVE-2011-4047

  • EPSS 3.3%
  • Veröffentlicht 12.11.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:34:20

The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.

4.3

CVE-2011-4048

  • EPSS 1.06%
  • Veröffentlicht 12.11.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:34:20

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credential...

3.5

CVE-2011-4436

  • EPSS 0.74%
  • Veröffentlicht 12.11.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:34:53

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2011-1672

  • EPSS 2.5%
  • Veröffentlicht 10.04.2011 02:55:01
  • Zuletzt bearbeitet 16.06.2026 23:29:47

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a p...