Dell Unity OS Command Injection Vulnerability Allowing Code Execution and Privilege Escalation

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This vulnerability allows a low-privileged attacker with local access to execute arbitrary operating system commands with root privileges, potentially leading to unauthorized code execution and elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized code execution with root privileges, allowing an attacker to gain elevated access to the system.

Remediation

Users are advised to upgrade to Dell Unity version 5.5.0.0.5.259 or later. Instructions for downloading the update are available on the Dell Support website.