Improper Permissions Vulnerability in Dell ThinOS Products
CVE-2025-27688

7.8HIGH

Key Information:

Vendor
Dell
Status
Wyse Proprietary Os (modern Thinos)
Vendor
CVE Published:
18 March 2025

Summary

The vulnerability in Dell ThinOS allows low-privileged users with local access to potentially exploit improper permissions, resulting in elevated privileges on the device. This exploit can compromise system integrity and grant unauthorized access to sensitive functionalities.

Affected Version(s)

Wyse Proprietary OS (Modern ThinOS) < N/A

References

https://www.dell.com/support/kbdoc/en-us/000289886/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.