CVE-2009-0695
EUVD-2009-069519.06.2012, 20:55
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | wyse_device_manager | 4.7.0 |
| dell | wyse_device_manager | 4.7.1 |
| dell | wyse_device_manager | 4.7.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References