PT-2025-11628 · Dell · Dell Thinos

Publicado 2025-03-18 · Atualizado 2025-03-18 · CVE-2025-27688

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell ThinOS versions 2408 and prior

Description The issue is related to improper permissions, which could be exploited by a low-privileged attacker with local access, potentially leading to elevation of privileges. This is due to incorrect permission assignment for critical resources.

Recommendations For Dell ThinOS versions 2408 and prior, update to a version later than 2408, such as ThinOS 2502, to resolve the improper permissions vulnerability. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Correção

LPE

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2025-27688

Produtos afetados

Dell Thinos

Referências · 7

• https://t.me/latest_high_impact_cve/1996 · Publicação no Telegram
• https://t.me/cvetracker/19387 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-27688 · Aviso do Fabricante
• https://t.me/cvedetector/20571 · Publicação no Telegram
• https://dell.com/support/kbdoc/en-us/000289886/dsa-2025-107 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-27688 · Nota de Segurança
• https://twitter.com/CVEnew/status/1902031985956044858 · Publicação no Twitter