CVE-2025-43728

CRITICAL

Published Aug 27, 2025 Modified Jan 15, 2026 CWE-693

Description

Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVSS v3.1 Score

9.6

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-693 CWE-693

Affected Products

Vendor	Product	Versions
dell	thinos	< 2508
dell	latitude_3330	All
dell	latitude_3420	All
dell	latitude_3440	All
dell	latitude_3450	All
dell	latitude_5440	All
dell	latitude_5450	All
dell	latitude_5520	All
dell	latitude_5530	All
dell	latitude_5540	All
dell	latitude_5550	All
dell	optiplex_3000_tc	All
dell	optiplex_5400_all-in-one	All
dell	optiplex_7020	All
dell	optiplex_all-in-one_7410	All
dell	optiplex_all-in-one_7420	All
dell	optiplex_micro_plus_7010	All
dell	precision_3260_compact	All
dell	precision_3280	All
dell	pro_14_pc14250	All
dell	pro_16_pc16250	All
dell	pro_16_plus_pb16250	All
dell	pro_24_all-in-one	All
dell	pro_max_14	All
dell	pro_max_16_plus	All
dell	pro_rugged_13_ra13250	All
dell	pro_rugged_14_rb14250	All
dell	pro_slim_low_sff	All
dell	pro_tower_qct1250	All
dell	wyse_5070_extended_thin_client	All
dell	wyse_5070_thin_client	All
dell	wyse_5470_all-in-one_thin_client	All
dell	wyse_5470_mtc	All

References

Advisories & Patches

https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331

Frequently Asked Questions

What is CVE-2025-43728? +

How severe is CVE-2025-43728? +

CVE-2025-43728 has a CVSS v3.1 score of 9.6 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

What products are affected by CVE-2025-43728? +

CVE-2025-43728 affects products from dell, specifically: latitude_3330, latitude_3420, latitude_3440, latitude_3450, latitude_5440, latitude_5450, latitude_5520, latitude_5530, latitude_5540, latitude_5550, optiplex_3000_tc, optiplex_5400_all-in-one, optiplex_7020, optiplex_all-in-one_7410, optiplex_all-in-one_7420, optiplex_micro_plus_7010, precision_3260_compact, precision_3280, pro_14_pc14250, pro_16_pc16250, pro_16_plus_pb16250, pro_24_all-in-one, pro_max_14, pro_max_16_plus, pro_rugged_13_ra13250, pro_rugged_14_rb14250, pro_slim_low_sff, pro_tower_qct1250, thinos, wyse_5070_extended_thin_client, wyse_5070_thin_client, wyse_5470_all-in-one_thin_client, wyse_5470_mtc. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-43728? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-3114

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security …

CVE-2024-51481

Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to …

CVE-2025-65100

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not …

CVE-2025-29864

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.

CVE-2025-66479

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS …

CVE-2025-34413

Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are not emitted by default. …