The vulnerability is a Missing Authentication for a critical function in Dell Wyse Management Suite, allowing an unauthenticated attacker with remote access to potentially obtain sensitive information. The flaw permits disclosure of data that the application is not intended to expose, directly compromising confidentiality. No indication of higher privileges or denial of service is stated, so the impact remains limited to data leakage. The weakness aligns with CWE‑200, representing information exposure due to inadequate access controls.

Dell Wyse Management Suite versions earlier than 2605.0.2 are affected. The product is used to manage Wyse thin clients. Systems running those older releases should be considered vulnerable until updated to at least release 2605.0.2.

The CVSS score of 5.3 marks the vulnerability as moderate. The absence of an EPSS value makes the exact exploit likelihood unclear, but the CVE states that an unauthenticated attacker with remote access could exploit it, implying a network‑based attack path. The vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known exploits at the time of reporting. However, given the lack of authentication checks, any exposed instance of the WMS could be abnormally susceptible to data leakage.