Wyse Management Subversion : Taking over Dell's Wyse Management Suite#

Alain Mowat

• Why: Thin-client management suites are fleet-wide control planes — a server compromise is a fleet takeover — and this research includes a real cross-tenant break in a vendor-operated cloud.
• What: Vulnerabilities in Dell's Wyse Management Suite enabling device impersonation (recovering policies for arbitrary devices and decrypting their secrets), full compromise of the WMS server and configured remote repositories, and — in Dell's own cloud — cross-tenant exploitation reaching other tenants' data and assets. (from abstract only)
• How: The research began by examining how secrets in policies pushed to thin clients are encrypted; device impersonation flaws plus server-side vulnerabilities chain into fleet-wide control.
• Where applicable: Dell WMS on-prem deployments and Dell's multi-tenant cloud environment; vendor-specific, with the cloud findings the most severe.