Dell Unity OS Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Dell Unity versions through 5.5. Low privileged attackers with local access can exploit this issue to execute arbitrary commands with root privileges. The vulnerability affects systems without a valid license installation.

Impact

Exploitation of this vulnerability allows for arbitrary command execution with root privileges, potentially leading to unauthorized access or modification of system resources.

Remediation

Users can upgrade to Dell Unity version 5.5.2 or later. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.