Lucene search

DellCVELIST:CVE-2022-34402

HistorySep 14, 2022 - 12:00 a.m.

CVE-2022-34402

2022-09-1400:00:00

CWE-1333

dell

www.cve.org

dell

wyse thinos

regular expression

denial of service

vulnerability

admin privilege

exploit

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.0%

JSON

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service.

CNA Affected

[
  {
    "vendor": "Dell",
    "product": "Wyse Proprietary OS (Modern ThinOS)",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "ThinOS 2208",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000203376/dsa-2022-247-dell-wyse-thinos-security-update-for-a-regular-expression-vulnerability

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.0%

JSON

Related for CVELIST:CVE-2022-34402