Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2018-15781

DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Wyse Password Encoder

  • ThinLinux2 to < 2.1.0.01affected

References