CVE-2018-15781

DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability

High · published February 13, 2019

CVSS v3.0
7.9
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.

The record
Technical detail
CVSS v3.0
7.9 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Published
2019-02-13T16:00Z
EPSS history
Timeline
  • 13 FEB 16:00Z
    DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability
    cvelistv5