CVE-2023-32481 Denial of service in Wyse Management Suite
An authenticated attacker can cause denial of service by flooding the SMTP server in Wyse Management Suite.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32481?
CVE-2023-32481 is a medium-severity denial of service vulnerability in Dell Wyse Management Suite, published on 20 Jul 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user can flood the configured SMTP server with numerous requests in order to deny access to the system.
Weakness: CWE-770
Which versions are affected by CVE-2023-32481?
It affects 1 product.
Products include Dell Wyse Management Suite.
How do I fix CVE-2023-32481?
No fix has been published for CVE-2023-32481 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-32481 being exploited?
There is no known exploitation of CVE-2023-32481 in the wild and no public exploit code.
Other vulnerabilities in Dell Wyse Management Suite
Sources
Also known as GHSA-wxrm-fcmp-858r.