Dell Unity OS Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows a low-privileged attacker with local access to execute arbitrary operating system commands with root privileges, potentially leading to a complete compromise of the system. The issue arises from improper handling of special elements in command execution.

Impact

Exploitation of this vulnerability could result in unauthorized command execution with elevated privileges, allowing an attacker to gain root access and potentially take over the system.

Remediation

Users are advised to upgrade to Dell Unity version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Support website.