VULNERABILITY INTELLIGENCE

CVE-2018-15781

CVSS score7.9 HIGH
EPSS probability0.83%
CISA KEVNot currently listed
Published2019-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references