Dell Unity OS Command Injection Vulnerability in NFS Support Utility

An OS command injection vulnerability has been identified in Dell Unity versions through 5.5, specifically within the 'svc_nfssupport' utility. This vulnerability allows authenticated attackers to escape the restricted shell and execute arbitrary operating system commands with root privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands with root privileges, allowing for significant manipulation of the operating system.

Remediation

Users can upgrade to Dell Unity version 5.5.1 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Unity All Flash Family Drivers page.