Device management: Various attacks on Dell Wyse Management Suite possible

Attackers can exploit several vulnerabilities in the Dell Wyse Management Suite device management software and access information that is actually protected, or even execute malicious code.

Security patches available

In a post, the developers list the vulnerabilities closed in version 5.1. All previous versions are said to be vulnerable. Several older vulnerabilities affect the MongoDB component. Among other things, DoS attacks are possible here (CVE-2022-4904, risk “high”).

The remaining vulnerabilities affect the device management software directly. This is where an attacker could use remote access without authentication to gain access to information (CVE-2025-29981, risk “high”).

The threat level for the other vulnerabilities is “medium”. Among other things, DoS attacks (CVE-2025-27694) and malicious code attacks (CVE-2025-27692) are conceivable here. It is not clear from Dell's announcement whether attacks have already occurred. It also remains unclear which parameters admins can use to recognize attacks that have already occurred.

(des)