CVE-2025-43728

critical · 9.6

Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

9.6

CVSS

0.4%

EPSS (exploit prob.)

29th

EPSS percentile

2025-08-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-693

Affected products

Vendor	Product	Affected versions
dell	thinos	< 2508
dell	latitude_3330	all versions
dell	latitude_3420	all versions
dell	latitude_3440	all versions
dell	latitude_3450	all versions
dell	latitude_5440	all versions
dell	latitude_5450	all versions
dell	latitude_5520	all versions
dell	latitude_5530	all versions
dell	latitude_5540	all versions
dell	latitude_5550	all versions
dell	optiplex_3000_tc	all versions
dell	optiplex_5400_all-in-one	all versions
dell	optiplex_7020	all versions
dell	optiplex_all-in-one_7410	all versions
dell	optiplex_all-in-one_7420	all versions
dell	optiplex_micro_plus_7010	all versions
dell	precision_3260_compact	all versions
dell	precision_3280	all versions
dell	pro_14_pc14250	all versions
dell	pro_16_pc16250	all versions
dell	pro_16_plus_pb16250	all versions
dell	pro_24_all-in-one	all versions
dell	pro_max_14	all versions
dell	pro_max_16_plus	all versions
dell	pro_rugged_13_ra13250	all versions
dell	pro_rugged_14_rb14250	all versions
dell	pro_slim_low_sff	all versions
dell	pro_tower_qct1250	all versions
dell	wyse_5070_extended_thin_client	all versions
dell	wyse_5070_thin_client	all versions
dell	wyse_5470_all-in-one_thin_client	all versions
dell	wyse_5470_mtc	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-43728