Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43729 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can execute local code to gain elevated privileges, potentially allowing unauthorized access to critical resources within the system.
Affected Products
- Dell ThinOS 10, versions prior to 2508_10.0127: This version is vulnerable due to incorrect permission assignments that could be exploited by local attackers.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell ThinOS 10 version 2508_10.0127 or later, which addresses the incorrect permission assignment issue.