CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Score

CVSS 3.1 7.3 High

Status

Analyzed - security_alert@emc.com

Published

2025-04-15

Last modified

2026-02-26

Weaknesses

CWE-59

Affected products

• Dell Trusted Device Client (Dell)
• Trusted Device Agent (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000299528/dsa-2025-151