Dell Unity OS Command Injection Vulnerability Allowing Privileged Command Execution

A command injection vulnerability has been identified in Dell Unity versions through 5.5. A low-privileged attacker with local access could exploit this issue to execute arbitrary commands with root privileges. The vulnerability arises from improper neutralization of special elements used in operating system commands.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution with elevated privileges, allowing a low-privileged user to gain root access on the affected system.

Remediation

Users can upgrade to Dell Unity version 5.5.2 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.