PT-2025-14444 · Dell · Dell Wyse Management Suite

Published 2025-04-02 · Updated 2025-07-11 · CVE-2025-27692

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to WMS 5.1

Description The issue concerns an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.

Recommendations For versions prior to WMS 5.1, update to WMS 5.1 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the Dell Wyse Management Suite to minimize the risk of exploitation. Additionally, restrict the upload of files with dangerous types to prevent potential attacks.

Fix

DoS

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-27692

Affected Products

Dell Wyse Management Suite

References · 8

• https://osv.dev/vulnerability/CVE-2025-27692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27692 · Security Note
• https://dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 · Vendor Advisory
• https://t.me/cvetracker/20535 · Telegram Post
• https://t.me/cvenotify/117299 · Telegram Post
• https://twitter.com/CVEnew/status/1907339866746036395 · Twitter Post
• https://t.me/cvenotify/128627 · Telegram Post
• https://t.me/cvedetector/21840 · Telegram Post