CVE-2025-29982 | THREATINT

Description

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

Reserved 2025-03-13 | Published 2025-04-02 | Updated 2025-04-02 | Assigner dell

MEDIUM: 6.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H

Problem types

CWE-277: Insecure Inherited Permissions

Product status

Default status

unaffected

Any version before 5.1

affected

Credits

Dell Technologies would like to thank Pwni and falconCorrup for reporting this issue. finder

References

www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 vendor-advisory

cve.org (CVE-2025-29982)

nvd.nist.gov (CVE-2025-29982)

Download JSON