Back
CVE-2019-3712
DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability
High8.2EPSS 0.90%
- Published
- Updated
- Reserved
- Assigned by
- dell
Description
Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| dellCNA (assigner) | 3.0 | High8.2 | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L |
| NVDNVD · Modified | 3.0 | High8.8 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.90% · top 40% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.2.
Weakness
- buffer overflow vulnerability
- CWE-119 (opens in a new tab)All about CWE-119 and its CVEs
Affected products
- affected unspecified – ≤ 14.1.2.9
- affected unspecified – ≤ 5.4.55 00.10
References (2)
- 107376 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://www.dell.com/support/article/us/en/19/sln316391 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-3712)Record last updated .