high7.6
CVE-2024-42427
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
Impact
Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Wyse Thinos | Versions 9.5.1079, 9.5.2109 |