Dell Unity OS Command Injection Vulnerability Allowing Arbitrary Command Execution

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows an unauthenticated attacker with remote access to execute arbitrary commands on the system with root privileges. The issue arises from improper neutralization of special elements used in operating system commands, creating a critical security risk as it could lead to a complete compromise of the system.

Impact

Exploitation of this vulnerability allows for arbitrary command execution with root privileges, potentially leading to a full system compromise.

Remediation

Users are advised to upgrade to Dell Unity version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Support website.