Dell Wyse Management Suite Unrestricted File Upload Vulnerability Allowing Remote Code Execution

A vulnerability exists in Dell Wyse Management Suite (WMS) versions prior to 5.1) that allows for unrestricted file uploads of dangerous types. This vulnerability could be exploited by a high-privileged attacker with remote access, potentially leading to denial-of-service, information disclosure, and remote code execution.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition, unauthorized information disclosure, and remote code execution on the affected system.

Remediation

Users can upgrade to Dell Wyse Management Suite version 5.1 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Wyse Management Suite Drivers page.