#VU79670 Allocation of Resources Without Limits or Throttling in Dell Wyse Management Suite - CVE-2023-32481

Vulnerability identifier: #VU79670

Vulnerability risk: Low

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-32481

CWE-ID: CWE-770

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Dell Wyse Management Suite
Other software / Other software solutions

Vendor: Dell

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to the application does not properly control consumption of internal resources. A remote user can flood the configured SMTP server with numerous requests in order to deny access to the system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Dell Wyse Management Suite: before 4.1

---

External links
https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.