This vulnerability allows an attacker with high privileges to upload arbitrary files of dangerous types through the Dell Wyse Management Suite. The upload flaw can be leveraged to upload a malicious payload that the system will execute, resulting in remote code execution. The weakness maps to CWE-434, where the application fails to validate the type of uploaded files.

The issue affects Dell Wyse Management Suite versions before 5.5. Systems running those versions are susceptible to the exploit regardless of network configuration, as the attack requires only a high‑privileged remote session to the management console.

The CVSS score of 7.2 classifies this as high severity. The EPSS score is below 1 %, indicating that while exploitability is low, it is not impossible. The vulnerability is not listed in the CISA KEV catalog, but remote execution remains a critical risk if the conditions are met. Attackers must first obtain elevated remote access; once achieved, the upload flaw can be invoked to execute arbitrary code.