Dell Unity OS Command Injection Vulnerability Allowing Arbitrary File Deletion

A critical OS command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows an unauthenticated attacker with remote access to delete arbitrary files, including critical system files, with root privileges. Exploitation of this vulnerability could lead to severe system disruption or compromise.

Impact

Successful exploitation allows for arbitrary file deletion as root, potentially leading to system instability or compromise.

Remediation

Dell recommends upgrading to version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.