CVE-2009-0695: hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows re...

Security readout for executives and security teams

Wyse Device Manager 4.7.x reportedly accepted management commands through hagent.exe without requiring authentication. A remote attacker who could reach the service could issue management actions, with public reporting demonstrating a power-off action. This is mainly a legacy thin-client management risk: exposure matters more than internet prevalence. Likely limited to organizations still running legacy Wyse Device Manager 4.7.x or related hagent.exe components reachable from user, server, or management networks. Internet exposure would be higher risk, but the source bundle does not establish prevalence. Prioritize remediation if Wyse thin-client management is still in use, especially where management services cross trust boundaries. The business concern is unauthorized control or disruption of managed endpoints, not a modern mass-exploitation signal from the supplied evidence. Mitigation focus: Check Wyse security bulletin WSB09-01 and CERT VU#654545 for vendor guidance.; Remove, upgrade, or retire legacy WDM 4.7.x where feasible.; Restrict hagent.exe and WDM management traffic to trusted management networks..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.