Dell Unity OS Command Injection Vulnerability Allowing Arbitrary Command Execution

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows an unauthenticated attacker with remote access to execute arbitrary commands on the system with root privileges. The issue arises from improper handling of special elements in operating system commands, which could be exploited to gain unauthorized access or control over the system.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands with root privileges, allowing for complete control over the affected system.

Remediation

Users are advised to upgrade to version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.