Dell Unity OS Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows a low-privileged attacker with local access to execute arbitrary operating system commands with root privileges, potentially leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability could result in arbitrary command execution as root, allowing for unauthorized access to system resources and capabilities.

Remediation

Users are advised to upgrade to version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.