Dell Unity OS Command Injection Vulnerability in svc_nas Utility

An OS command injection vulnerability has been identified in the svc_nas utility of Dell Unity versions through 5.5. An authenticated attacker could exploit this vulnerability to escape the restricted shell and execute arbitrary operating system commands with root privileges.

Impact

Exploitation of this vulnerability allows for arbitrary command execution with root privileges, potentially leading to a complete compromise of the affected system.

Remediation

Users can upgrade to Dell Unity version 5.5.1 or later. Instructions for downloading the update are available on the Dell Unity All Flash Family Drivers page.