CVE-2024-30472 Information disclosure in Wyse 5070 Thin Client
An unauthenticated local user can exploit a vulnerability in Dell ThinOS Telemetry Dashboard to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-30472?
CVE-2024-30472 is a high-severity vulnerability in Dell Wyse 5070 Thin Client, published on 13 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure.
Weakness: CWE-200
Which versions are affected by CVE-2024-30472?
It affects 1 product.
Products include Microsoft Telemetry Dashboard.
How do I fix CVE-2024-30472?
No fix has been published for CVE-2024-30472 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-30472 being exploited?
There is no known exploitation of CVE-2024-30472 in the wild and no public exploit code.
Sources
Also known as GHSA-289h-3jv5-7284.