Vulnerability Details CVE-2025-43730
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A local unauthenticated user could potentially exploit this vulnerability leading to Elevation of Privileges and Information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.8%
CVSS Severity
CVSS v3 Score 8.4
Products affected by CVE-2025-43730
-
cpe:2.3:h:dell:latitude_3330:-
-
cpe:2.3:h:dell:latitude_3420:-
-
cpe:2.3:h:dell:latitude_3440:-
-
cpe:2.3:h:dell:latitude_3450:-
-
cpe:2.3:h:dell:latitude_5440:-
-
cpe:2.3:h:dell:latitude_5450:-
-
cpe:2.3:h:dell:latitude_5520:-
-
cpe:2.3:h:dell:latitude_5530:-
-
cpe:2.3:h:dell:latitude_5540:-
-
cpe:2.3:h:dell:latitude_5550:-
-
cpe:2.3:h:dell:optiplex_3000_tc:-
-
cpe:2.3:h:dell:optiplex_5400_all-in-one:-
-
cpe:2.3:h:dell:optiplex_7020:-
-
cpe:2.3:h:dell:optiplex_all-in-one_7410:-
-
cpe:2.3:h:dell:optiplex_all-in-one_7420:-
-
cpe:2.3:h:dell:optiplex_micro_plus_7010:-
-
cpe:2.3:h:dell:precision_3260_compact:-
-
cpe:2.3:h:dell:precision_3280:-
-
cpe:2.3:h:dell:pro_14_pc14250:-
-
cpe:2.3:h:dell:pro_16_pc16250:-
-
cpe:2.3:h:dell:pro_16_plus_pb16250:-
-
cpe:2.3:h:dell:pro_24_all-in-one:-
-
cpe:2.3:h:dell:pro_max_14:-
-
cpe:2.3:h:dell:pro_max_16_plus:-
-
cpe:2.3:h:dell:pro_rugged_13_ra13250:-
-
cpe:2.3:h:dell:pro_rugged_14_rb14250:-
-
cpe:2.3:h:dell:pro_slim_low_sff:-
-
cpe:2.3:h:dell:pro_tower_qct1250:-
-
cpe:2.3:h:dell:wyse_5070_extended_thin_client:-
-
cpe:2.3:h:dell:wyse_5070_thin_client:-
-
cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-
-
cpe:2.3:h:dell:wyse_5470_mtc:-
-
cpe:2.3:o:dell:thinos:2402
-
cpe:2.3:o:dell:thinos:2408
-
cpe:2.3:o:dell:thinos:2411
-
cpe:2.3:o:dell:thinos:2502