NetSight
IP …
high7.5Public exploit code

CVE-2009-0695

hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a cra…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.

Affected products

VendorProductAffected versions
DellWyse Device Manager
Versions 4.7.0, 4.7.1, 4.7.2

Weakness classification

CWE-287

References