Product: Dell ThinOS 10
Summary
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) vulnerability. A local unauthenticated user could potentially exploit this vulnerability leading to Elevation of Privileges and Information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-43730 |
Exploitation
To exploit this vulnerability, an unauthenticated local user can craft specific commands that manipulate argument delimiters, potentially leading to unauthorized access and privilege escalation within the system.
Affected Products
- Dell ThinOS 10 versions prior to 2508_10.0127: This version is vulnerable to argument injection, allowing local users to escalate privileges.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell ThinOS 10 version 2508_10.0127 or later, which addresses the improper neutralization of argument delimiters.