Dell ThinOS 10 Command Injection Vulnerability Leading to Privilege Escalation

A command injection vulnerability has been identified in Dell ThinOS 10, affecting versions prior to 2602_10.0573. This vulnerability allows a low-privileged attacker with local access to exploit the system, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could allow a low-privileged attacker with local access to gain elevated privileges on the affected system.

Remediation

Users can upgrade to Dell ThinOS 10 version 2602_10.0573_T10 or later. The ThinOS 10 2602 Firmware Upgrade Package is available on the Dell Support website.