CVE-2025-27692 MEDIUM

CVE-2025-27692

Vendor Dell
Product Wyse Management Suite Repository
Weakness CWE-434 · Unrestricted file upload
Published April 2, 2025
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution

Key dates

02Disclosure timeline

April 2, 2025 CVE published
April 10, 2025 Record updated