CVE-2024-53290 HIGH

CVE-2024-53290

Vendor Dell

Product Wyse Proprietary OS (Modern ThinOS)

Weakness CWE-77

Published December 11, 2024

Last update December 11, 2024

View on NVD All CVEs

CVSS base score

8.4/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution

Key dates

02Disclosure timeline

December 11, 2024 CVE published

December 11, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-53290 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html

Related vulnerabilities

04Related CVE

CVE-2024-37023 Vonets WiFi Bridges Command Injection CVE-2019-1782 Cisco FXOS and NX-OS Software Command Injection Vulnerability CVE-2024-49042 Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability CVE-2026-3066 HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection CVE-2025-1448 Synway SMG Gateway Management Software 9-12ping.php command injection