The version of Dell Wyse Management Suite installed on the remote host is prior to 5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2025-135 advisory.

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information     Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially     exploit this vulnerability, leading to Information disclosure. (CVE-2025-29981)

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions     vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,     leading to Unauthorized access. (CVE-2025-29982)

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool     vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,     leading to Denial of service. (CVE-2025-27694)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Dell Wyse Management Suite < 5.1 Multiple Vulnerabilities (DSA-2025-135)

high Nessus Plugin ID 233818

Version 1.2

Version 1.1

Version 1.2 Apr 4, 2025, 9:01 PM New Plugin Feed: 202504042101
Version 1.1 Apr 4, 2025, 7:32 AM New Plugin Feed: 202504040732