1. Home
  2. CVE Database
  3. CVE-2021-21597
HIGH · 7.2

CVE-2021-21597

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read se...

Vulnerability Description

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DellWyse Thinos9.0
DellWyse 3040 Thin Client-
DellWyse 5070 Thin Client-
DellWyse 5470 Thin Client-

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2021-21597?

CVE-2021-21597 is a vulnerability with a CVSS score of 7.2 (HIGH). Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read se...

How severe is CVE-2021-21597?

CVE-2021-21597 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-21597?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Wyse Thinos, Dell Wyse 3040 Thin Client, Dell Wyse 5070 Thin Client, Dell Wyse 5470 Thin Client.