7.6
Élevée
CVE-2024-42427 Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command…
Description
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wyse Proprietary OS (Modern ThinOS) | Versions non publiées | |
| wyse_proprietary_os | 2405 | Pas de correctif indiqué |
| wyse_proprietary_os | 2402 | Pas de correctif indiqué |
Autres CVE de Wyse Proprietary OS (Modern ThinOS)
Les 11 CVE de Wyse Proprietary OS (Modern ThinOS) →
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability
7.8
Élevée
CVE-2025-26331
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command…
7.8
Élevée
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
7.8
Élevée
CVE-2024-53290
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection')…
8.4
Élevée