Technical impact
The vulnerability is an improper neutralization of special elements used in an SQL command in Dell Wyse Management Suite versions prior to 2605. It permits a low‑privileged attacker with remote access to inject arbitrary SQL, potentially compromising the integrity and confidentiality of the underlying database and enabling unauthorized access.
Affected Systems
Dell Wyse Management Suite (WMS) versions earlier than 2605 are affected. The vulnerable component is part of the remote management interface. The CVE description does not specify which user roles interact with it; it is inferred that administrators or other users could use it.
Risk and Exploitability
With a CVSS score of 8.8, the risk is high. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, though remote exploitation requires low privileged access. An attacker can exploit the component via a remote connection to the management interface to inject SQL commands.
