Dell Unity OS Command Injection Vulnerability Allowing Privilege Escalation

An OS command injection vulnerability has been identified in Dell Unity versions through 5.5. A low-privileged attacker with local access could exploit this vulnerability to execute commands, potentially leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability could allow a low-privileged attacker with local access to execute commands on the system, with the possibility of escalating privileges.

Remediation

Users can upgrade to Dell Unity version 5.5.2 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.