PT-2025-20410 · Dell · Dell Wyse Management Suite

Published 2025-05-08 · Updated 2025-05-08 · CVE-2025-27695

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 5.1

Description The issue is an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this, leading to Information Disclosure.

Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue. As a temporary workaround, consider restricting remote access to minimize the risk of exploitation.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-27695

Affected Products

Dell Wyse Management Suite

References · 6

• https://osv.dev/vulnerability/CVE-2025-27695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27695 · Security Note
• https://dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 · Vendor Advisory
• https://t.me/cvedetector/24844 · Telegram Post
• https://twitter.com/CVEnew/status/1920595168467824822 · Twitter Post
• https://t.me/cvetracker/23386 · Telegram Post