7.6
High
CVE-2024-42427 Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command…
Description
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wyse Proprietary OS (Modern ThinOS) | Versions not published | |
| wyse_proprietary_os | 2405 | No fix stated |
| wyse_proprietary_os | 2402 | No fix stated |
Other CVEs of Wyse Proprietary OS (Modern ThinOS)
The 11 CVEs of Wyse Proprietary OS (Modern ThinOS) →
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability
7.8
High
CVE-2025-26331
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command…
7.8
High
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
7.8
High
CVE-2024-53290
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection')…
8.4
High