CVE-2025-27688

Published: Mar 18, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: security_alert@emc.com (Secondary)

Description

Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected (1)

Products: Dell: Thinos

Dell

1 product

Thinos

Configuration A

1 vulnerable · 11 platform

Vulnerable Software	Affected Versions
Dell Thinos	Up to 2408

Running on/with	Platform Versions
Dell Latitude 3420	All versions
Dell Latitude 3440	All versions
Dell Latitude 5440	All versions
Dell Latitude 5450	All versions
Dell Optiplex 3000 Thin Client	All versions
Dell Optiplex 5400 All In One	All versions
Dell Optiplex 7410 All In One	All versions
Dell Optiplex 7420 All In One	All versions
Dell Wyse 5070 Thin Client	All versions
Dell Wyse 5470 All In One Thin Client	All versions
Dell Wyse 5470 Mobile Thin Client	All versions

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

https://www.dell.com/support/kbdoc/en-us/000289886/dsa-2025-107

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.