Skip to content
OpenAdvisories
High · 7.9 CVE-2018-15781 EUVD-2018-7644GHSA-r477-c5ch-w7wr

DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability

Published Feb 13, 2019 · Updated Sep 16, 2024 · Assigned by dell

Description

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.

Affected products

VendorProductAffectedFixed
Dell Wyse Password Encoder ThinLinux2 – < 2.1.0.01 2.1.0.01

References