Read the docs
TI-2022-07316 Aliases CVE-2022-23158GHSA-9fc6-qfxw-pw7j

Information disclosure in Dell Wyse Device Agent

Priority LOW 28CWE-183Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server

Why it matters now

EPSS 0.00713 53rd percentileScored 2026-11-07
Fix Fixed Dell Wyse Device Agent (Dell): 14.6.2.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellDell Wyse Device Agentbefore 14.6.2.1314.6.2.13Patch availableCNA
  • Dell Wyse Device Agent VendorDell Affected before 14.6.2.13 Fixed in 14.6.2.13 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dell:wyse_device_agent:*:*:*:*:*:*:*:*up to 14.6.1.4VulnerableDell
  • cpe:2.3:a:dell:wyse_device_agent:*:*:*:*:*:*:*:* Versions up to 14.6.1.4 Vulnerable ·Dell

Remediation

  • Fix · CNA Dell Wyse Device Agent (Dell) Fixed in 14.6.2.13

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell Wyse Device Agent 14.6.2.13

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2022-07314 Improper authentication in Dell Wyse Device AgentPriority LOW 29
    • TI-2022-07315 Information disclosure in Dell Wyse Device AgentPriority LOW 20
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23158
  2. 2026-10-03 Alias added: GHSA-9fc6-qfxw-pw7j

References

Advisory 1

  • TI-2022-07314 Improper authentication in Dell Wyse Device Agent CVSS 3.1MEDIUM 6.7
  • TI-2021-14704 Information disclosure in Dell Wyse Device Agent CVSS 3.1MEDIUM 5.5
  • TI-2022-07315 Information disclosure in Dell Wyse Device Agent CVSS 3.1MEDIUM 4.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences