Description
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Wyse Proprietary OS (Modern ThinOS) | Dell ThinOS 2402, Dell ThinOS 2405 | — |
References
- https://www.dell.com/support/kbdoc/en-us/000228350/dsa-2024-386 vendor-advisory