CVE-2025-26331

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

Dell ThinOS 命令注入漏洞

Dell ThinOS is a client operating system from the American company Dell. Dell ThinOS suffers from a command injection vulnerability that arises from an application's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to execute...

Dell ThinOS Command Injection Vulnerability (CNVD-2024-49615)

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53289

CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-53290

Dell ThinOS 2408 is affected by a local, unauthenticated Command Injection due to improper neutralization of special elements. The CVE-2024-53290 entry documents allow command execution with high impact (C/H, I/H, A/H) and a local attack vector; no exploitation or patch details are confirmed in t...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-53290

Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...

PT-2024-35712 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

PT-2024-35714 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability. An unauthenticated attacker with local access could potentially...

Dell ThinOS 命令注入漏洞

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

The CVE-2024-42423 entry concerns Citrix Workspace App 23.9.0.24.4 on Dell ThinOS 2311 with an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local, unauthenticated user with low privileges could bypass controls, potentially leading to information disclosure and ...