PT-2024-35712 · Dell · Dell Thinos

Published 2024-12-11 · Updated 2025-06-24 · CVE-2024-53289

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell ThinOS version 2408

Description The issue is related to a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Recommendations For Dell ThinOS version 2408, consider restricting local access to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and limit privileges for all users to prevent potential elevation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2024-53289

Affected Products

Dell Thinos

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-53289 · Security Note
• https://dell.com/support/kbdoc/en-us/000248475/dsa-2024-463 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53289 · Vendor Advisory
• https://twitter.com/taku888infinity/status/1937324951553605959 · Twitter Post
• https://twitter.com/CVEnew/status/1866809433348526138 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1866766147997061583 · Twitter Post
• https://twitter.com/cracbot/status/1868536592257970546 · Twitter Post
• https://t.me/cvedetector/12616 · Telegram Post
• https://t.me/cvenotify/103845 · Telegram Post