Product:
Unity
Summary
Dell Unity, versions 5.5 and prior, contain an OS Command Injection vulnerability due to improper neutralization of special elements. A low privileged attacker with local access could exploit this vulnerability, potentially leading to command execution and elevation of privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43942 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific commands that manipulate the OS command execution process. By injecting malicious input into the system, the attacker can execute arbitrary commands with the privileges of the affected application, leading to unauthorized access and control over the system.
Affected Products
- Unity: Versions 5.5 and prior are affected by the OS Command Injection vulnerability.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of Dell Unity that addresses this issue. Additionally, restricting local access to the system and monitoring for unusual command executions can help reduce the risk of exploitation.