Cyber Resilience

CVE-2025-27694

Medium

Published: 02 April 2025

Published
02 April 2025
Modified
11 July 2025
KEV Added
—
Patch
—
CVSS Score v3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score 0.0043 62.9th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-27694 is a medium-severity Insufficient Resource Pool (CWE-410) vulnerability in Dell Wyse Management Suite. Its CVSS base score is 5.3 (Medium).

Operationally, ranked in the top 37.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CWE(s)
CWE-410

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dell
wyse management suite
≤ 5.1

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SC-6 Resource Availability
addresses: CWE-410

Ensures a managed resource pool is maintained rather than allowing exhaustion by any single consumer.

References