ZeroHour

CVE-2022-29097

CVSS 3.1
4.9 medium
EPSS
1%p68
Published
()
Modified
Description

Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

Vendors
dell
Products
wyse management suite
Weakness
CWE-23, CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.