CVE-2025-43993
HIGHDescription
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
Is your site exposed to CVE-2025-43993?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| dell | pro_rugged_13_ra13250_firmware |
| dell | pro_rugged_13_ra13250 |
| dell | pro_rugged_14_rb14250_firmware |
| dell | pro_rugged_14_rb14250 |
| dell | latitude_5350_firmware |
| dell | latitude_5350 |
| dell | latitutde_5450_firmware |
| dell | latitutde_5450 |
| dell | latitude_5550_firmware |
| dell | latitude_5550 |
| dell | latitude_7030_rugged_extreme_tablet_firmware |
| dell | latitude_7030_rugged_extreme_tablet |
| dell | latitude_7350_firmware |
| dell | latitude_7350 |
| dell | latitude_7350_detachable_firmware |
| dell | latitude_7350_detachable |
| dell | latitude_7450_firmware |
| dell | latitude_7450 |
| dell | latitude_7650_firmware |
| dell | latitude_7650 |
| dell | latitude_9450_2-in-1_firmware |
| dell | latitude_9450_2-in-1 |
| dell | mobile_precision_3591_firmware |
| dell | mobile_precision_3591 |
| dell | precision_3490_firmware |
| dell | precision_3490 |
| dell | precision_3590_firmware |
| dell | precision_3590 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-43993? +
How severe is CVE-2025-43993? +
What products are affected by CVE-2025-43993? +
How do I check if I'm vulnerable to CVE-2025-43993? +
Related Vulnerabilities
Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the …
The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has …
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with …
Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during …
An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows). Due to the unquoted …
A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External …