{"vulnerability": "CVE-2020-2949", "sightings": [{"uuid": "af3852d2-297a-4df1-a4e8-5862858ecba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/Yemen_Shield/684", "content": "Two critical flaws \u2014 CVSS score 10 \u2014 affect several models of Dell Wyse Thin Client devices, allowing attackers to remotely run malicious code and access arbitrary files.\n\nDetails: https://thehackernews.com/2020/12/two-critical-flaws-cvss-score-10-affect.html\n \nCVE-2020-29491\nCVE-2020-29492", "creation_timestamp": "2020-12-22T16:34:26.000000Z"}, {"uuid": "9cdf9071-91cf-4924-916d-26d9b69c48bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/Yemen_Shield/684", "content": "Two critical flaws \u2014 CVSS score 10 \u2014 affect several models of Dell Wyse Thin Client devices, allowing attackers to remotely run malicious code and access arbitrary files.\n\nDetails: https://thehackernews.com/2020/12/two-critical-flaws-cvss-score-10-affect.html\n \nCVE-2020-29491\nCVE-2020-29492", "creation_timestamp": "2020-12-22T16:34:26.000000Z"}, {"uuid": "a99439a2-f5cf-4fee-bc5b-d44c56379e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/CyberGovIL/1019", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Com2750 | Dell\n\n\u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T11:54:13.000000Z"}, {"uuid": "0c855cfe-da98-42ae-a911-6c770ed45dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/CyberGovIL/1019", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Com2750 | Dell\n\n\u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T11:54:13.000000Z"}, {"uuid": "9b8d9f9e-1929-419f-98e7-73d424d63871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/CyberGovIL/1083", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\nhttps://www.gov.il/he/departments/publications/reports/dell_thin_clients\n\n\u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea (CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2021-01-07T00:07:41.000000Z"}, {"uuid": "934df035-1482-465c-9cd6-d5509210bda2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/CyberGovIL/1083", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\nhttps://www.gov.il/he/departments/publications/reports/dell_thin_clients\n\n\u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea (CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2021-01-07T00:07:41.000000Z"}, {"uuid": "d36f4808-77ce-49d3-8919-f6e45c820314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/CyberSecurityIL/1439", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T12:55:38.000000Z"}, {"uuid": "da97e4c5-614b-4f2b-98e6-a1bf95fcb32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/CyberSecurityIL/1439", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T12:55:38.000000Z"}, {"uuid": "7d1a636a-5eef-4069-b831-391b9176d673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29499", "type": "seen", "source": "https://t.me/cibsecurity/26272", "content": "\u203c CVE-2020-29499 \u203c\n\nDell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X environment . A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-20T02:32:48.000000Z"}, {"uuid": "aa71a521-a184-44f5-917f-6d903cf34c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29494", "type": "seen", "source": "https://t.me/cibsecurity/22185", "content": "\u203c CVE-2020-29494 \u203c\n\nDell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the arbitrary files stored on the server filesystem, causing deletion of arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-15T00:50:37.000000Z"}, {"uuid": "0fd0892c-6212-4cf9-9c99-3b43e7b373b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29490", "type": "seen", "source": "https://t.me/cibsecurity/21641", "content": "\u203c CVE-2020-29490 \u203c\n\nDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service (Storage Processor Panic) by sending specially crafted UDP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-06T00:44:38.000000Z"}, {"uuid": "174f09b7-667f-49c8-80c3-47834deb0a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29495", "type": "seen", "source": "https://t.me/cibsecurity/22189", "content": "\u203c CVE-2020-29495 \u203c\n\nDELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high privileges. This vulnerability is considered critical as it can be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-15T00:50:40.000000Z"}, {"uuid": "dc48fa30-b309-46e0-9647-6f632f9fc91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29493", "type": "seen", "source": "https://t.me/cibsecurity/22186", "content": "\u203c CVE-2020-29493 \u203c\n\nDELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database, causing unauthorized read and write access to application data. Exploitation may lead to leakage or deletion of sensitive backup data; hence the severity is Critical. Dell EMC recommends customers to upgrade at the earliest opportunity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-15T00:50:38.000000Z"}, {"uuid": "b39c6d7c-c3bc-4e5b-ae71-6bd51397aef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29497", "type": "seen", "source": "https://t.me/cibsecurity/21560", "content": "\u203c CVE-2020-29497 \u203c\n\nDell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-05T00:53:10.000000Z"}, {"uuid": "2e65d770-1479-4da8-ae47-ecb22861c2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29498", "type": "seen", "source": "https://t.me/cibsecurity/21559", "content": "\u203c CVE-2020-29498 \u203c\n\nDell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-05T00:53:09.000000Z"}, {"uuid": "121f2a5e-2565-45d4-8513-87c52a0821d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/cibsecurity/21563", "content": "\u203c CVE-2020-29491 \u203c\n\nDell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-05T00:53:15.000000Z"}, {"uuid": "910d57e1-f673-4831-970a-c9900e5d7ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/cibsecurity/21562", "content": "\u203c CVE-2020-29492 \u203c\n\nDell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-05T00:53:11.000000Z"}, {"uuid": "62388abc-0032-4967-908b-801b98bdca0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29496", "type": "seen", "source": "https://t.me/cibsecurity/21561", "content": "\u203c CVE-2020-29496 \u203c\n\nDell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-05T00:53:11.000000Z"}, {"uuid": "d9ed27ae-bbf3-490f-ac0f-f5e4c3c30f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/CyberSecurityIL/524", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T12:55:38.000000Z"}, {"uuid": "44e33e13-fd75-49d5-89ce-dae76951358a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/CyberSecurityIL/524", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Thin Clients \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Dell\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05d7\u05d1\u05e8\u05ea Dell \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05ea\u05e8\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea ( CVE-2020-29492, CVE-2020-29491) \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 ThinOS, \u05d4\u05de\u05d9\u05d5\u05e2\u05d3\u05ea \u05dc-Thin clients \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2020-12-23T12:55:38.000000Z"}, {"uuid": "abdd71d8-447d-475f-8c62-05a10521753b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/information_security_channel/42441", "content": "The giant Dell Wyse is affected by two Critical Vulnerabilities CVE-2020-29491 and CVE-2020-29492 which targets thin client devices. The CyberMDX\u00a0Research team has discovered these vulnerabilities\u00a0on Dell Wyse thin clients, wherein when the vulnerability is exploited, the attackers can run malicious codes remotely and access arbitrary files on the affected devices. What is a thin client? [\u2026]\nThe post Critical Dell Wyse Bugs Let Attackers to Execute Code and Access Files and Credentials (https://gbhackers.com/critical-dell-wyse-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-12-22T13:47:00.000000Z"}, {"uuid": "4acaec92-a294-4a39-a1bd-a31d19bd2189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/information_security_channel/42441", "content": "The giant Dell Wyse is affected by two Critical Vulnerabilities CVE-2020-29491 and CVE-2020-29492 which targets thin client devices. The CyberMDX\u00a0Research team has discovered these vulnerabilities\u00a0on Dell Wyse thin clients, wherein when the vulnerability is exploited, the attackers can run malicious codes remotely and access arbitrary files on the affected devices. What is a thin client? [\u2026]\nThe post Critical Dell Wyse Bugs Let Attackers to Execute Code and Access Files and Credentials (https://gbhackers.com/critical-dell-wyse-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-12-22T13:47:00.000000Z"}, {"uuid": "2691ca76-93a1-4859-808b-f99a8af51957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29492", "type": "seen", "source": "https://t.me/thehackernews/949", "content": "Two critical flaws \u2014 CVSS score 10 \u2014 affect several models of Dell Wyse Thin Client devices, allowing attackers to remotely run malicious code and access arbitrary files.\n\nDetails: https://thehackernews.com/2020/12/two-critical-flaws-cvss-score-10-affect.html\n \nCVE-2020-29491\nCVE-2020-29492", "creation_timestamp": "2020-12-21T17:59:56.000000Z"}, {"uuid": "47ce8860-6883-43f5-a5bb-8d0292e29250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29491", "type": "seen", "source": "https://t.me/thehackernews/949", "content": "Two critical flaws \u2014 CVSS score 10 \u2014 affect several models of Dell Wyse Thin Client devices, allowing attackers to remotely run malicious code and access arbitrary files.\n\nDetails: https://thehackernews.com/2020/12/two-critical-flaws-cvss-score-10-affect.html\n \nCVE-2020-29491\nCVE-2020-29492", "creation_timestamp": "2020-12-21T17:59:56.000000Z"}]}