CVE-2025-27692

CWE-434 — Unrestricted File Upload3 documents3 sources

Severity

7.2HIGH

EPSS

1.7%

top 17.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell Wyse Management Suite Repository Dell Wyse Management Suite

Timeline

PublishedApr 2

Description

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 1.2 | Impact: 3.4

Affected Packages2 packages

▶NVDdell/wyse_management_suite< 5.1

▶CVEListV5dell/wyse_management_suite_repositoryN/A — 5.1

🔴Vulnerability Details

GHSA

GHSA-5h78-99vm-hr67: Dell Wyse Management Suite, versions prior to WMS 5↗2025-04-02

▶

CVEList

CVE-2025-27692: Dell Wyse Management Suite, versions prior to WMS 5↗2025-04-02

▶