CVE-2024-49595

CVSS 3.1 Score 7.6 of 10 (high)

Details

Published Nov 26, 2024
CWE ID 294

Summary

CVE-2024-44959 is a newly disclosed vulnerability affecting Dell Wyse Management Suite versions WMS 4.4 and below. This issue involves an Authentication Bypass by Capture-replay, allowing high-privileged remote attackers to bypass authentication, potentially leading to a Denial of Service condition. The vulnerability lies in the way WMS handles authentication tokens, enabling unauthorized access to the system. System administrators are strongly urged to update their Dell Wyse Management Suite software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share