Detections
Analytics
Dell Wyse Management Suite < 2605.0.2 Multiple Vulnerabilities (DSA-2026-329)
high Nessus Plugin ID 338318
Language:
Synopsis
Dell Wyse Management Suite installed on the remote host is affected by multiple vulnerabilities.Description
The version of Dell Wyse Management Suite installed on the remote host is prior to 2605.0.2. It is, therefore, affected by multiple vulnerabilities, including:- Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution. (CVE-2026-66270)
- Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution. (CVE-2026-66271)
- Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation. (CVE-2026-63700)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Dell Wyse Management Suite version 2605.0.2 or later.See Also
Plugin Details
Severity: High
ID: 338318
File Name: dell_wyse_management_suite_dsa-2026-329.nasl
Version: 1.1
Type: Local
Agent: windows
Family: Windows
Published: 8/20/2026
Updated: 8/20/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 58.12
CVSS v2
Risk Factor: High
Base Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2026-66270
CVSS v3
Risk Factor: High
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score Source: CVE-2026-63700
Vulnerability Information
CPE: cpe:/a:dell:wyse_management_suite
Required KB Items: installed_sw/Dell Wyse Management Suite
Patch Publication Date: 8/11/2026
Vulnerability Publication Date: 8/11/2026
Reference Information
CVE: CVE-2026-63700, CVE-2026-63701, CVE-2026-63702, CVE-2026-66270, CVE-2026-66271, CVE-2026-66272