CVE-2020-29492

—

CVSS 3.1

10.0 critical

EPSS

2%p76

Published

Jan 4, 2021 (Jan 4, 2021)

Modified

Jun 17, 2026

Description

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station.

Vendors: dell
Products: wyse thinos
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news2 stories

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

The Hacker NewsDec 25, 04:51 UTC · Dec 25, 2020Vulnerability CVE-2020-29491 CVE-2020-29492

Dell Wyse ThinOS flaws allow hacking think clients

Security AffairsDec 21, 22:01 UTC · Dec 21, 2020Vulnerability CVE-2020-29492 CVE-2020-29491