{"id":"CVE-2025-27694","state":"PUBLISHED","title":"Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially explo","description":"Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.","publishedAt":"2025-04-02T00:12:16.032Z","updatedAt":"2025-04-02T13:24:43.503Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"dell"},"assigner":"dell","products":["Dell Wyse Management Suite"],"affected":[{"vendor":"Dell","product":"Wyse Management Suite","defaultStatus":"unaffected","versions":[{"version":"N/A","status":"affected","lessThan":"5.1","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135"],"weaknesses":["CWE-410"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/27xxx/CVE-2025-27694.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-27694","state":"PUBLISHED","datePublished":"2025-04-02T00:12:16.032Z","dateUpdated":"2025-04-02T13:24:43.503Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2025-03-05T07:33:28.315Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service."}],"affected":[{"vendor":"Dell","product":"Wyse Management Suite","defaultStatus":"unaffected","versions":[{"version":"N/A","status":"affected","lessThan":"5.1","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-410","description":"CWE-410: Insufficient Resource Pool","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2025-04-02T00:12:16.032Z"},"credits":[{"lang":"en","type":"finder","value":"Dell Technologies would like to thank Alain Mowat from Orange Cyberdefense Switzerland's research lab for reporting these issues."}],"datePublic":"2025-04-01T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-02T13:19:09.622801Z","id":"CVE-2025-27694","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-02T13:24:43.503Z"}}]}}}