| Package | Affected versions | Patched versions |
|---|---|---|
| wyse device manager | = 4.7.0= 4.7.1= 4.7.2 |
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free