CVE-2025-43729

Estado: AnalizadaAlta (7.8)—

Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 7.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.13%
Percentil entre todas las CVEs puntuadas: 2
Fecha de la puntuación: 5/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1068 Exploitation for Privilege Escalationprivilege escalation85 %
Impacto principalT1548 Abuse Elevation Control Mechanismprivilege escalation90 %
Impacto secundarioT1222 File and Directory Permissions Modificationdefense impairment85 %

CWE-732 (Incorrect Permission Assignment) explotable localmente por usuario sin privilegios (PR:L) lleva a escalada de privilegios. T1548 como impacto primario por lograr privilegios elevados; T1222 como secundario por acceso no autorizado a recursos críticos.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict File and Directory Permissions Privileged Account Management Execution Prevention Update Software User Account Management Threat Intelligence Program

Tecnologías afectadas (1)

Dell — Thinos

CWE

CWE-732

Referencias

https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331

JSON original (NVD)

Mostrar

{
  "id": "CVE-2025-43729",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-43729",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-28T03:55:26.514616Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "ThinOS 10",
          "versions": [
            {
              "status": "affected",
              "version": "N/A",
              "lessThan": "2508_10.0127",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-27T14:15:50.937",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access."
    },
    {
      "lang": "es",
      "value": "Dell ThinOS 10, versiones anteriores a la 2508_10.0127, contiene una vulnerabilidad de asignación incorrecta de permisos para recursos críticos. Un atacante local con pocos privilegios podría explotar esta vulnerabilidad, lo que provocaría una elevación de privilegios y acceso no autorizado."
    }
  ],
  "lastModified": "2026-06-17T09:24:23.137",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:thinos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D06C2C8B-6EBA-4C1C-8D6B-BB92F3BFCD95",
              "versionEndExcluding": "2508"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52B5397C-6646-4EF5-894A-156AB6704295"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7FB6E60F-F100-42BF-BC38-A38620EF8D2C"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_3440:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "31C78A9B-65B4-4213-9A96-4E57CFA5B195"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_3450:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C087B85D-2F09-49E5-8BE9-DE724B7D5BFB"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5440:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "84EC8EA3-A91D-4D3B-B1A5-D650A526CAAE"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5450:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3DAF60D4-BDA2-43ED-802D-CE3ACB548693"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2AC36F7-FC4B-4CA4-91F3-8337C8F34681"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5EB8E326-0B12-4889-A7D2-AFFEAFBAD6AF"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5540:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2B13569-D3F7-4847-B2BE-6BC414F8FC52"
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1FD13310-CCC0-490C-A959-42EF8EC41232"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_3000_tc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8FA3CCBF-5DA1-4561-A933-FA24E71E683A"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_5400_all-in-one:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D08E685B-A29C-482E-989C-083B83E7C5CE"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_7020:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "84533BD1-3A0B-463D-A3CB-0B3DE816235E"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_all-in-one_7410:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9B59560F-34A6-4B29-94B7-D04CDBA61A84"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_all-in-one_7420:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BCF051C7-F440-449B-81BC-761D6681834D"
            },
            {
              "criteria": "cpe:2.3:h:dell:optiplex_micro_plus_7010:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "81EBA40C-36F9-4790-9369-6DEDCBB1EB26"
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_3260_compact:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "63A76C54-765B-4B50-AACB-E1AE80666325"
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_3280:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E7DFA74C-83F0-4E7D-95DF-821D9F5E265E"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_14_pc14250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4301C860-38AC-402A-85D8-7C7401DCD4AB"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_16_pc16250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D6331156-5254-4485-B893-98066F6AC081"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_16_plus_pb16250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "607B9989-E5E9-48D7-B4DD-5EE6C28A89F2"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_24_all-in-one:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "70A7C423-66F8-4C30-9CBC-60402B0FE604"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_max_14:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0568C3D3-1E10-4612-B4F1-C2958908004B"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_max_16_plus:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8C0A51D1-E96D-470F-A13A-C3FE6BBF4D01"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_rugged_13_ra13250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "291A5F5C-D7B1-4745-A885-E7C5136D5302"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_rugged_14_rb14250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "04BC32D4-43B9-4243-9762-905D4C332AD6"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_slim_low_sff:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ABBEAB89-7C14-4578-8DB8-7D208CE0AAD5"
            },
            {
              "criteria": "cpe:2.3:h:dell:pro_tower_qct1250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "808A8143-DE7B-45BA-BDCA-203CFD0B4279"
            },
            {
              "criteria": "cpe:2.3:h:dell:wyse_5070_extended_thin_client:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52E907D0-84D2-46F4-A325-3E26347CBDAC"
            },
            {
              "criteria": "cpe:2.3:h:dell:wyse_5070_thin_client:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C1664E2E-057D-4A8F-B8FC-73EC25D48DBC"
            },
            {
              "criteria": "cpe:2.3:h:dell:wyse_5470_all-in-one_thin_client:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3929B7A4-D181-4258-8722-57A751DB4CCC"
            },
            {
              "criteria": "cpe:2.3:h:dell:wyse_5470_mtc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6819DA6E-39DD-4D5A-B4A3-A3816F7A2343"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}