Unrestricted File Upload Vulnerability in Dell Wyse Management Suite
CVE-2025-27692

4.7MEDIUM

Key Information:

Vendor
Dell
Status
Wyse Management Suite Repository
Vendor
CVE Published:
2 April 2025

Summary

Dell Wyse Management Suite, prior to version 5.1, is susceptible to an unrestricted file upload vulnerability that could be exploited by attackers with high-level privileges. This vulnerability allows remote access to upload potentially dangerous files, which may lead to denial of service, information disclosure, and remote code execution. Organizations using affected versions should review their installation and take immediate action to mitigate risks associated with this flaw.

Affected Version(s)

Wyse Management Suite Repository < 5.1

References

https://www.dell.com/support/kbdoc/en-us/000296515/dsa-20...
vendor-advisory

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.