PT-2025-24897 · Dell · Dell Wyse Management Suite

Published 2025-06-10 · Updated 2025-07-11 · CVE-2025-36574

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 5.2

Description The issue is an Absolute Path Traversal vulnerability that could be exploited by an unauthenticated attacker with remote access, potentially leading to information disclosure and unauthorized access.

Recommendations For versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the Dell Wyse Management Suite until the update can be applied.

Fix

Weakness Enumeration

CWE-36

Related Identifiers

BDU:2025-07628

CVE-2025-36574

Affected Products

Dell Wyse Management Suite

References · 6

• https://osv.dev/vulnerability/CVE-2025-36574 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000325679/dsa-2025-226 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36574 · Security Note
• https://t.me/cvenotify/128561 · Telegram Post
• https://twitter.com/CVEnew/status/1932512925778129380 · Twitter Post