CVE-2024-49595
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Nov 26, 2024
CWE ID 294
Summary
CVE-2024-44959 is a newly disclosed vulnerability affecting Dell Wyse Management Suite versions WMS 4.4 and below. This issue involves an Authentication Bypass by Capture-replay, allowing high-privileged remote attackers to bypass authentication, potentially leading to a Denial of Service condition. The vulnerability lies in the way WMS handles authentication tokens, enabling unauthorized access to the system. System administrators are strongly urged to update their Dell Wyse Management Suite software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share