PT-2025-11628 · Dell · Dell Thinos

Published 2025-03-18 · Updated 2025-03-18 · CVE-2025-27688

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell ThinOS versions 2408 and prior

Description The issue is related to improper permissions, which could be exploited by a low-privileged attacker with local access, potentially leading to elevation of privileges. This is due to incorrect permission assignment for critical resources.

Recommendations For Dell ThinOS versions 2408 and prior, update to a version later than 2408, such as ThinOS 2502, to resolve the improper permissions vulnerability. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-27688

Affected Products

Dell Thinos

References · 7

• https://osv.dev/vulnerability/CVE-2025-27688 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000289886/dsa-2025-107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27688 · Security Note
• https://t.me/latest_high_impact_cve/1996 · Telegram Post
• https://t.me/cvetracker/19387 · Telegram Post
• https://t.me/cvedetector/20571 · Telegram Post
• https://twitter.com/CVEnew/status/1902031985956044858 · Twitter Post