CVE-2020-29492

State: Published
Severity: 10.0 Critical
Published: Jan 4, 2021
Updated: Sep 16, 2024
Reserved: Dec 3, 2020

Description

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	dell

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
Wyse Proprietary OS (ThinOS)Dell	before 8.6Affected

References

https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.