Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000203376/dsa-2022-247-dell-wyse-thinos-security-update-for-a-regular-expression-vulnerability | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Jul 2023, 18:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1333 |
12 Oct 2022, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| CWE | CWE-697 | |
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000203376/dsa-2022-247-dell-wyse-thinos-security-update-for-a-regular-expression-vulnerability - Patch, Vendor Advisory | |
| CPE | cpe:2.3:o:dell:wyse_thinos:*:*:*:*:*:*:*:* cpe:2.3:h:dell:wyse_5070_thin_client:-:*:*:*:*:*:*:* cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:*:*:*:*:*:*:* cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:* cpe:2.3:h:dell:wyse_5470_mobile_thin_client:-:*:*:*:*:*:*:* cpe:2.3:h:dell:optiplex_3000_thin_client:-:*:*:*:*:*:*:* cpe:2.3:h:dell:wyse_3040_thin_client:-:*:*:*:*:*:*:* |
|
| First Time |
Dell wyse 5070 Thin Client
Dell wyse 5470 Mobile Thin Client Dell wyse Thinos Dell wyse 3040 Thin Client Dell optiplex 3000 Thin Client Dell Dell wyse 5470 All-in-one Thin Client Dell latitude 3420 |
10 Oct 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-10 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-34402
Mitre link : CVE-2022-34402
CVE.ORG link : CVE-2022-34402
JSON object : View
Products Affected
dell
- wyse_3040_thin_client
- wyse_thinos
- optiplex_3000_thin_client
- wyse_5470_mobile_thin_client
- latitude_3420
- wyse_5470_all-in-one_thin_client
- wyse_5070_thin_client
CWE