Dell

Wyse Device Manager

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2009-0693

  • EPSS 23.45%
  • Published 19.06.2012 20:55:02
  • Last modified 11.04.2025 00:51:21

Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.

7.5

CVE-2009-0695

Exploit
  • EPSS 70.62%
  • Published 19.06.2012 20:55:02
  • Last modified 11.04.2025 00:51:21

hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.