Dell Wyse Management Suite Unrestricted File Upload RCE

Executive Summary

Dell Wyse Management Suite (WMS) versions before 2605.0.2 have an Unrestricted Upload of File with Dangerous Type vulnerability. This allows a highly privileged remote attacker to upload malicious files, potentially leading to Remote Code Execution on the affected system.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking Dell Wyse Management Suite versions prior to 2605.0.2. Verify installed version via system commands like 'rpm -qa | grep wyse' or 'dpkg -l | grep wyse' depending on your OS. Compare against 2605.0.2.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the WMS server. This may lead to unauthorized access, data breaches, or complete system compromise, depending on the attacker's goals and the system's configuration.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows remote code execution due to unrestricted file uploads, which could lead to unauthorized access or data breaches. This may impact compliance with GDPR by risking personal data exposure and HIPAA by compromising protected health information if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Update Dell Wyse Management Suite to version 2605.0.2 or later to address the vulnerability. Ensure only trusted users have high privileges and restrict remote access to the system.

Useful 0 Not Useful 0