Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability.

published 2022-08-10 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-33501

cvss: 8.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits: 0; none known

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions.

Patch / fix

fixed in 1

Dell Wyse Management Suite 3.7

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	8.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
NVD	3.1	6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Dell Wyse Management Suite

Classification

Weakness

CWE-317 Cleartext Storage of Sensitive Information in GUI
CWE-312 Cleartext Storage of Sensitive Information

References

dell.com /support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabil
vendor-advisory

Sources

CVE List CVE-2022-29090
NVD CVE-2022-29090

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary