PT-2025-14444 · Dell · Dell Wyse Management Suite

CVE-2025-27692 · Publicado 2025-04-02 · Atualizado 2025-07-11

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to WMS 5.1

Description The issue concerns an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.

Recommendations For versions prior to WMS 5.1, update to WMS 5.1 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the Dell Wyse Management Suite to minimize the risk of exploitation. Additionally, restrict the upload of files with dangerous types to prevent potential attacks.

Correção

DoS

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2025-27692

Produtos afetados

Dell Wyse Management Suite

Referências · 8

• https://osv.dev/vulnerability/CVE-2025-27692 · Aviso do Fabricante
• https://t.me/cvetracker/20535 · Publicação no Telegram
• https://t.me/cvenotify/117299 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-27692 · Nota de Segurança
• https://twitter.com/CVEnew/status/1907339866746036395 · Publicação no Twitter
• https://t.me/cvenotify/128627 · Publicação no Telegram
• https://t.me/cvedetector/21840 · Publicação no Telegram
• https://dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 · Aviso do Fabricante