Описание
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Затрагиваемое ПО
Dell ThinosDell Latitude 3420Dell Latitude 3440Dell Latitude 5440Dell Latitude 5450Dell Optiplex 3000 thin clientDell Optiplex 5400 all-in-oneDell Optiplex 7410 all-in-oneDell Optiplex 7420 all-in-oneDell Wyse 5070 thin clientDell Wyse 5470 all-in-one thin clientDell Wyse 5470 mobile thin client
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://www.dell.com/support/kbdoc/en-us/000289886/dsa-2025-107