CVE-2019-3712

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.90%

Published

Mar 7, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.

Weaknesses (CWE)

CWE-119

Affected Products (2)

dell · windows_embedded_standard_wyse_device_agent (up to 14.1.2.9)vulnerable

dell · wyse_thinlinux_hagent (up to 5.4.55_00.10)vulnerable

References (4)

http://www.securityfocus.com/bid/107376

Third Party Advisory

https://www.dell.com/support/article/us/en/19/sln316391

PatchVendor Advisory

http://www.securityfocus.com/bid/107376

Third Party Advisory

https://www.dell.com/support/article/us/en/19/sln316391

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs