CVE-2025-43993 - Vulnerability Details

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00019.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Dell Subscribe	Latitude 5350 Subscribe Latitude 5350 Firmware Subscribe Latitude 5550 Subscribe Latitude 5550 Firmware Subscribe Latitude 7030 Rugged Extreme Tablet Subscribe Latitude 7030 Rugged Extreme Tablet Firmware Subscribe Latitude 7350 Subscribe Latitude 7350 Detachable Subscribe Latitude 7350 Detachable Firmware Subscribe Latitude 7350 Firmware Subscribe Latitude 7450 Subscribe Latitude 7450 Firmware Subscribe Latitude 7650 Subscribe Latitude 7650 Firmware Subscribe Latitude 9450 2-in-1 Subscribe Latitude 9450 2-in-1 Firmware Subscribe Latitutde 5450 Subscribe Latitutde 5450 Firmware Subscribe Mobile Precision 3591 Subscribe Mobile Precision 3591 Firmware Subscribe Precision 3490 Subscribe Precision 3490 Firmware Subscribe Precision 3590 Subscribe Precision 3590 Firmware Subscribe Pro Rugged 13 Ra13250 Subscribe Pro Rugged 13 Ra13250 Firmware Subscribe Pro Rugged 14 Rb14250 Subscribe Pro Rugged 14 Rb14250 Firmware Subscribe Wireless 5932e Subscribe
Qualcomm Subscribe	Gnss Gps Subscribe Snapdragon X62 Subscribe

Configuration 1 [-]

AND

cpe:2.3:o:dell:pro_rugged_13_ra13250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:pro_rugged_13_ra13250:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:dell:pro_rugged_14_rb14250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:pro_rugged_14_rb14250:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:dell:latitude_5350_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_5350:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:dell:latitutde_5450_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitutde_5450:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:dell:latitude_5550_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:dell:latitude_7030_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_7030_rugged_extreme_tablet:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:dell:latitude_7350_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_7350:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:dell:latitude_7350_detachable_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_7350_detachable:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:dell:latitude_7450_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_7450:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:dell:latitude_7650_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_7650:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:dell:latitude_9450_2-in-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_9450_2-in-1:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:dell:mobile_precision_3591_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:mobile_precision_3591:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:dell:precision_3490_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_3490:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:dell:precision_3590_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_3590:-:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Dell Subscribe	Wireless 5932e Subscribe
Qualcomm Subscribe	Gnss Gps Subscribe Snapdragon X62 Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2025-31155	Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.dell.com/support/kbdoc/en-us/000372605/dsa-2025-363

History

Fri, 16 Jan 2026 17:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell latitude 5350 Dell latitude 5350 Firmware Dell latitude 5550 Dell latitude 5550 Firmware Dell latitude 7030 Rugged Extreme Tablet Dell latitude 7030 Rugged Extreme Tablet Firmware Dell latitude 7350 Dell latitude 7350 Detachable Dell latitude 7350 Detachable Firmware Dell latitude 7350 Firmware Dell latitude 7450 Dell latitude 7450 Firmware Dell latitude 7650 Dell latitude 7650 Firmware Dell latitude 9450 2-in-1 Dell latitude 9450 2-in-1 Firmware Dell latitutde 5450 Dell latitutde 5450 Firmware Dell mobile Precision 3591 Dell mobile Precision 3591 Firmware Dell precision 3490 Dell precision 3490 Firmware Dell precision 3590 Dell precision 3590 Firmware Dell pro Rugged 13 Ra13250 Dell pro Rugged 13 Ra13250 Firmware Dell pro Rugged 14 Rb14250 Dell pro Rugged 14 Rb14250 Firmware
CPEs		cpe:2.3:h:dell:latitude_5350:-:::::::* cpe:2.3:h:dell:latitude_5550:-:::::::* cpe:2.3:h:dell:latitude_7030_rugged_extreme_tablet:-:::::::* cpe:2.3:h:dell:latitude_7350:-:::::::* cpe:2.3:h:dell:latitude_7350_detachable:-:::::::* cpe:2.3:h:dell:latitude_7450:-:::::::* cpe:2.3:h:dell:latitude_7650:-:::::::* cpe:2.3:h:dell:latitude_9450_2-in-1:-:::::::* cpe:2.3:h:dell:latitutde_5450:-:::::::* cpe:2.3:h:dell:mobile_precision_3591:-:::::::* cpe:2.3:h:dell:precision_3490:-:::::::* cpe:2.3:h:dell:precision_3590:-:::::::* cpe:2.3:h:dell:pro_rugged_13_ra13250:-:::::::* cpe:2.3:h:dell:pro_rugged_14_rb14250:-:::::::* cpe:2.3:o:dell:latitude_5350_firmware:::::::: cpe:2.3:o:dell:latitude_5550_firmware:::::::: cpe:2.3:o:dell:latitude_7030_rugged_extreme_tablet_firmware:::::::: cpe:2.3:o:dell:latitude_7350_detachable_firmware:::::::: cpe:2.3:o:dell:latitude_7350_firmware:::::::: cpe:2.3:o:dell:latitude_7450_firmware:::::::: cpe:2.3:o:dell:latitude_7650_firmware:::::::: cpe:2.3:o:dell:latitude_9450_2-in-1_firmware:::::::: cpe:2.3:o:dell:latitutde_5450_firmware:::::::: cpe:2.3:o:dell:mobile_precision_3591_firmware:::::::: cpe:2.3:o:dell:precision_3490_firmware:::::::: cpe:2.3:o:dell:precision_3590_firmware:::::::: cpe:2.3:o:dell:pro_rugged_13_ra13250_firmware:::::::: cpe:2.3:o:dell:pro_rugged_14_rb14250_firmware::::::::
Vendors & Products		Dell latitude 5350 Dell latitude 5350 Firmware Dell latitude 5550 Dell latitude 5550 Firmware Dell latitude 7030 Rugged Extreme Tablet Dell latitude 7030 Rugged Extreme Tablet Firmware Dell latitude 7350 Dell latitude 7350 Detachable Dell latitude 7350 Detachable Firmware Dell latitude 7350 Firmware Dell latitude 7450 Dell latitude 7450 Firmware Dell latitude 7650 Dell latitude 7650 Firmware Dell latitude 9450 2-in-1 Dell latitude 9450 2-in-1 Firmware Dell latitutde 5450 Dell latitutde 5450 Firmware Dell mobile Precision 3591 Dell mobile Precision 3591 Firmware Dell precision 3490 Dell precision 3490 Firmware Dell precision 3590 Dell precision 3590 Firmware Dell pro Rugged 13 Ra13250 Dell pro Rugged 13 Ra13250 Firmware Dell pro Rugged 14 Rb14250 Dell pro Rugged 14 Rb14250 Firmware

Fri, 26 Sep 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 26 Sep 2025 11:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dell Dell wireless 5932e Qualcomm Qualcomm gnss Gps Qualcomm snapdragon X62
Vendors & Products		Dell Dell wireless 5932e Qualcomm Qualcomm gnss Gps Qualcomm snapdragon X62

Thu, 25 Sep 2025 19:45:00 +0000

Type	Values Removed	Values Added
Description		Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
Weaknesses		CWE-428
References		https://www.dell.com/support/kbdoc/en-us/000372605/dsa-2025-363
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2025-09-25T19:38:00.845Z

Updated: 2025-09-26T17:39:48.405Z

Reserved: 2025-04-21T05:03:43.635Z

Link: CVE-2025-43993

Vulnrichment

Updated: 2025-09-26T17:39:45.550Z

NVD

Status : Analyzed

Published: 2025-09-25T20:15:35.080

Modified: 2026-01-16T17:05:29.587

Link: CVE-2025-43993

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-09-26T11:35:35Z

Weaknesses

CWE-428

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object