Dell Unity OS Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Dell Unity versions through 5.4. This issue arises from improper handling of special elements in operating system commands, allowing a low-privileged attacker with local access to execute commands and potentially escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution and privilege escalation on the affected system.

Remediation

Users can upgrade to Dell Unity version 5.5.2 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.