Dell Unity OS Command Injection Vulnerability Allowing Arbitrary Command Execution with Root Privileges

A command injection vulnerability has been identified in Dell Unity versions through 5.5.2. This vulnerability allows a low-privileged attacker with local access to execute arbitrary commands with root privileges. The issue arises from improper neutralization of special elements used in operating system commands.

Impact

Exploitation of this vulnerability could lead to unauthorized arbitrary command execution with root privileges on the affected system.

Remediation

Users can upgrade to Dell Unity version 5.5.3 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Unity All-Flash Family Drivers page.