Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Unauthorized Access. This issue poses significant risks to the confidentiality, integrity, and availability of the affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43882 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can execute local code to gain unauthorized access to the system. This may involve manipulating system files or configurations that are not adequately protected, allowing the attacker to escalate their privileges.
Affected Products
- Dell ThinOS 10: A lightweight operating system designed for thin clients, which is vulnerable to unauthorized access due to the unverified ownership issue.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell ThinOS 10 version 2508_10.0127 or later. Additionally, implementing strict access controls and monitoring local user activities can help reduce the risk of exploitation.