CVE-2024-49597

Published: Nov 26, 2024Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Affected (1)

Products: Dell: Wyse Management Suite

1 product

Wyse Management Suite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Wyse Management Suite	Up to 4.4

Related CWEs

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (1)

https://www.dell.com/support/kbdoc/en-us/000244453/dsa-2024-440

Source: security_alert@emc.com

MitigationVendor Advisory

Timeline

No history available yet.