An improper access control flaw exists in Dell ThinOS 10 versions earlier than 2602_10.0765. The vulnerability allows an attacker who is unauthenticated but has physical access to a device to read sensitive information. The primary consequence is the disclosure of data that should be protected, affecting confidentiality without necessarily compromising integrity or availability.

Dell ThinOS 10 environments running firmware prior to 2602_10.0765. The flaw applies to all models that ship with a ThinOS 10 operating system before the specified build number.

The CVSS score of 6.1 indicates a moderate severity. The attack requires physical proximity and no network connectivity, so the probability of exploitation depends largely on the physical security of the environment. While the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the potential for information exposure remains significant in settings where physical access is a risk.