Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.
Metrics
Affected Vendors & Products
References
History
Fri, 20 Dec 2024 15:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Dell wyse Thinos
|
|
CPEs | cpe:2.3:o:dell:wyse_thinos:9.5.1079:*:*:*:*:*:*:* cpe:2.3:o:dell:wyse_thinos:9.5.2109:*:*:*:*:*:*:* |
|
Vendors & Products |
Dell wyse Thinos
|
Tue, 10 Sep 2024 16:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Dell
Dell wyse Proprietary Os |
|
CPEs | cpe:2.3:a:dell:wyse_proprietary_os:*:*:*:*:*:*:*:* | |
Vendors & Products |
Dell
Dell wyse Proprietary Os |
|
Metrics |
ssvc
|
Tue, 10 Sep 2024 07:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges. | |
Weaknesses | CWE-77 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: dell
Published: 2024-09-10T07:39:17.775Z
Updated: 2024-09-10T15:16:23.482Z
Reserved: 2024-08-01T07:28:53.702Z
Link: CVE-2024-42427
Vulnrichment
Updated: 2024-09-10T15:16:18.392Z
NVD
Status : Analyzed
Published: 2024-09-10T08:15:02.760
Modified: 2024-12-20T14:43:52.363
Link: CVE-2024-42427
Redhat
No data.