CVE-2025-43993CWE-428

CVE-2025-43993

High · published September 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2025-09-26T00:15Z
Affected products (14)
ProductVersionsFixed in
dell/pro_rugged_13_ra13250_firmware< 3.2.0.223.2.0.22
dell/pro_rugged_14_rb14250_firmware< 3.2.0.223.2.0.22
dell/latitude_5350_firmware< 3.2.0.223.2.0.22
dell/latitutde_5450_firmware< 3.2.0.223.2.0.22
dell/latitude_5550_firmware< 3.2.0.223.2.0.22
dell/latitude_7030_rugged_extreme_tablet_firmware< 3.2.0.223.2.0.22
dell/latitude_7350_firmware< 3.2.0.223.2.0.22
dell/latitude_7350_detachable_firmware< 3.2.0.223.2.0.22
dell/latitude_7450_firmware< 3.2.0.223.2.0.22
dell/latitude_7650_firmware< 3.2.0.223.2.0.22
dell/latitude_9450_2-in-1_firmware< 3.2.0.223.2.0.22
dell/mobile_precision_3591_firmware< 3.2.0.223.2.0.22
dell/precision_3490_firmware< 3.2.0.223.2.0.22
dell/precision_3590_firmware< 3.2.0.223.2.0.22
References (1)
EPSS history
Timeline
  • 25 SEP 19:38Z
    Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element…
    cvelistv5