Lucene search

K
nvd[email protected]NVD:CVE-2022-34402
HistoryOct 10, 2022 - 9:15 p.m.

CVE-2022-34402

2022-10-1021:15:11
CWE-1333
web.nvd.nist.gov
dell wyse thinos
ui
regex
dos
vulnerability
admin privilege
exploit

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.0%

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service.

Affected configurations

NVD
Node
dellwyse_thinosRange<9.3.2102
AND
delllatitude_3420Match-
OR
delloptiplex_3000_thin_clientMatch-
OR
dellwyse_3040_thin_clientMatch-
OR
dellwyse_5070_thin_clientMatch-
OR
dellwyse_5470_all-in-one_thin_clientMatch-
OR
dellwyse_5470_mobile_thin_clientMatch-

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.0%

Related for NVD:CVE-2022-34402