{"id":"CVE-2025-43993","title":"Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability","summary":"Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-428"],"vendor":"dell","product":"pro_rugged_13_ra13250_firmware","affected":["pro_rugged_13_ra13250_firmware < 3.2.0.22","pro_rugged_14_rb14250_firmware < 3.2.0.22","latitude_5350_firmware < 3.2.0.22","latitutde_5450_firmware < 3.2.0.22","latitude_5550_firmware < 3.2.0.22","latitude_7030_rugged_extreme_tablet_firmware < 3.2.0.22","latitude_7350_firmware < 3.2.0.22","latitude_7350_detachable_firmware < 3.2.0.22","latitude_7450_firmware < 3.2.0.22","latitude_7650_firmware < 3.2.0.22","latitude_9450_2-in-1_firmware < 3.2.0.22","mobile_precision_3591_firmware < 3.2.0.22","precision_3490_firmware < 3.2.0.22","precision_3590_firmware < 3.2.0.22"],"patched":["pro_rugged_13_ra13250_firmware 3.2.0.22","pro_rugged_14_rb14250_firmware 3.2.0.22","latitude_5350_firmware 3.2.0.22","latitutde_5450_firmware 3.2.0.22","latitude_5550_firmware 3.2.0.22","latitude_7030_rugged_extreme_tablet_firmware 3.2.0.22","latitude_7350_firmware 3.2.0.22","latitude_7350_detachable_firmware 3.2.0.22","latitude_7450_firmware 3.2.0.22","latitude_7650_firmware 3.2.0.22","latitude_9450_2-in-1_firmware 3.2.0.22","mobile_precision_3591_firmware 3.2.0.22","precision_3490_firmware 3.2.0.22","precision_3590_firmware 3.2.0.22"],"published":"2025-09-25","updated":"2026-10-11","sourceUpdated":"2026-10-11T20:10:00.200","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-43993","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000372605/dsa-2025-363","label":"security_alert@emc.com"}],"tags":["nvd"],"epss":0.00165,"epssPercentile":0.05223,"ingestedAt":"2026-10-12T14:50:33.998Z","slug":"CVE-2025-43993","body":"## Overview\n\nDell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.\n\n## Affected\n\n- `pro_rugged_13_ra13250_firmware < 3.2.0.22`\n- `pro_rugged_14_rb14250_firmware < 3.2.0.22`\n- `latitude_5350_firmware < 3.2.0.22`\n- `latitutde_5450_firmware < 3.2.0.22`\n- `latitude_5550_firmware < 3.2.0.22`\n- `latitude_7030_rugged_extreme_tablet_firmware < 3.2.0.22`\n- `latitude_7350_firmware < 3.2.0.22`\n- `latitude_7350_detachable_firmware < 3.2.0.22`\n- `latitude_7450_firmware < 3.2.0.22`\n- `latitude_7650_firmware < 3.2.0.22`\n- `latitude_9450_2-in-1_firmware < 3.2.0.22`\n- `mobile_precision_3591_firmware < 3.2.0.22`\n- `precision_3490_firmware < 3.2.0.22`\n- `precision_3590_firmware < 3.2.0.22`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `pro_rugged_13_ra13250_firmware 3.2.0.22`\n- `pro_rugged_14_rb14250_firmware 3.2.0.22`\n- `latitude_5350_firmware 3.2.0.22`\n- `latitutde_5450_firmware 3.2.0.22`\n- `latitude_5550_firmware 3.2.0.22`\n- `latitude_7030_rugged_extreme_tablet_firmware 3.2.0.22`\n- `latitude_7350_firmware 3.2.0.22`\n- `latitude_7350_detachable_firmware 3.2.0.22`\n- `latitude_7450_firmware 3.2.0.22`\n- `latitude_7650_firmware 3.2.0.22`\n- `latitude_9450_2-in-1_firmware 3.2.0.22`\n- `mobile_precision_3591_firmware 3.2.0.22`\n- `precision_3490_firmware 3.2.0.22`\n- `precision_3590_firmware 3.2.0.22`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}