CVE-2022-33924

MEDIUM

Dell Wyse Management Suite <3.6.1 - Privilege Escalation

Title source: llm

Description

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities

Scores

CVSS v3 4.3

EPSS 0.0009

EPSS Percentile 25.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-284

Status published

Products (1)

dell/wyse_management_suite < 3.8.0

Published Aug 10, 2022

Tracked Since Feb 18, 2026