What is CVE-2018-15781?

CVE-2018-15781 is a high-severity vulnerability in Dell Wyse Password Encoder, classified under Use of Hard-coded Credentials. CVSS score: 7.9/10. Published 2019-02-13.

How severe is CVE-2018-15781?

High severity. CVSS v3 base score is 7.9 out of 10.

Vulnerability in Dell Wyse Password Encoder

CVE-2018-15781

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.

EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.9 (High). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Dell Wyse Password Encoder — versions ThinLinux2
Dell Wyse_thinlinux

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

security_alert@emc.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-15781?: CVE-2018-15781 is a high-severity vulnerability in Dell Wyse Password Encoder, classified under Use of Hard-coded Credentials. CVSS score: 7.9/10. Published 2019-02-13.
How severe is CVE-2018-15781?: High severity. CVSS v3 base score is 7.9 out of 10.