Dell ThinOS Command Injection Vulnerability: Unauthorized Elevation of Privileges

CVE-2024-42427

Summary

Dell ThinOS versions 2402 and 2405 are affected by a command injection vulnerability. This security issue arises from improper neutralization of special elements used within commands, potentially allowing an unauthenticated attacker with physical access to exploit the vulnerability. Successful exploitation may result in an elevation of privileges, granting the attacker increased access to the affected system.

References