Dell ThinOS 10 Argument Injection Vulnerability Leading to Privilege Escalation and Information Disclosure

A vulnerability allowing improper neutralization of argument delimiters in a command has been identified in Dell ThinOS 10, versions prior to 2508_10.0127. This vulnerability could be exploited by a local, unauthenticated user, potentially leading to elevation of privileges and unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges and access to sensitive information.

Remediation

Users can upgrade to ThinOS 10_2508_0127 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Support website.