Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) vulnerability. A local unauthenticated user could potentially exploit this vulnerability leading to Elevation of Privileges and Information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-43730 |
Exploitation
To exploit this vulnerability, a local unauthenticated user can manipulate command arguments in a way that the system does not properly neutralize them, potentially leading to unauthorized access and privilege escalation.
Affected Products
- Dell ThinOS 10: A thin client operating system that may be vulnerable if not updated to version 2508_10.0127 or later.
Mitigation
To mitigate this vulnerability, users should update their Dell ThinOS to version 2508_10.0127 or later to ensure that the improper neutralization of argument delimiters is addressed.