CVE-2019-3712

DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability

High · published March 7, 2019

CVSS v3.0
8.2
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00904 · 59.4th percentile
Published
2019-03-07T19:00Z
EPSS history
Timeline
  • 07 MAR 19:00Z
    DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability
    cvelistv5