Technical impact
Dell Wyse Management Suite versions prior to 2605 contain a Use of Default Credentials flaw, identified as CWE-1392. An attacker with local high privileges can log in using factory credentials and gain unauthorized access to management interfaces, potentially exposing configuration data and other sensitive information.
Affected Systems
Dell Wyse Management Suite (WMS) for all releases before 2605.
Risk and Exploitability
The CVSS score of 6 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV, suggesting limited public exploitation. Since the attack requires local high‑privilege access, the likelihood of exploitation depends on the attacker’s physical or network proximity to the WMS system. If achieved, the information disclosed could assist further attacks against the network or other assets.
