CVEvulnerability
CVE-2019-3712
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.2 HIGH — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.
Affected configurations
• dell windows embedded standard wyse device agent (< 14.1.2.9)
• dell wyse thinlinux hagent (< 5.4.55 00.10)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/107376 Third Party Advisory
- https://www.dell.com/support/article/us/en/19/sln316391 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/107376 Third Party Advisory
- https://www.dell.com/support/article/us/en/19/sln316391 Patch, Vendor Advisory