CVE-2023-32446 Information disclosure in Wyse Proprietary OS (Modern ThinOS)
An unauthenticated local attacker can read sensitive information from log files in Dell Wyse ThinOS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32446?
CVE-2023-32446 is a medium-severity vulnerability in Dell Wyse Proprietary OS (Modern ThinOS), published on 20 Jul 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.
Which versions are affected by CVE-2023-32446?
It affects 1 product.
Products include Dell Wyse Thinos.
How do I fix CVE-2023-32446?
No fix has been published for CVE-2023-32446 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-32446 being exploited?
There is no known exploitation of CVE-2023-32446 in the wild and no public exploit code.
Other vulnerabilities in Dell Wyse Proprietary OS (Modern ThinOS)
- CVE-2020-29491 Misconfiguration in Wyse Proprietary OS (ThinOS)
- CVE-2020-29492 Misconfiguration in Wyse Proprietary OS (ThinOS)
- CVE-2024-42427 Command injection in Wyse Proprietary OS (Modern ThinOS)
- CVE-2021-21597 Information disclosure in Wyse ThinOS
- CVE-2022-34402 Denial of service in Wyse Proprietary OS (Modern ThinOS)
Sources
Also known as GHSA-hqm4-p64v-22xm.