Product:
Unity
Summary
Dell Unity, versions 5.5 and prior, contain an improper neutralization of special elements used in an OS command vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license install.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2025-43941 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific OS commands that take advantage of the improper neutralization. By executing these commands, the attacker can gain root privileges on the affected system, allowing them to perform unauthorized actions.
Affected Products
- Dell Unity 5.5 and prior: Affected by OS command injection vulnerability allowing local attackers to execute arbitrary commands.
Mitigation
To mitigate this vulnerability, ensure that all systems are running a version of Dell Unity that is not affected by this issue. Additionally, maintain valid licenses for all installations to prevent exploitation by low privileged attackers.