Product:
Dell Unity
Summary
Dell Unity versions 5.5 and prior contain an improper neutralization of special elements used in an OS command vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-46422 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific OS commands that are improperly handled by the system. By executing these commands, the attacker can gain root privileges and perform unauthorized actions on the affected system. The low attack complexity makes it easier for attackers to leverage this vulnerability.
Affected Products
- Dell Unity 5.5 and prior: Vulnerable to OS command injection due to improper handling of special elements.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell Unity that addresses this issue. Additionally, restricting local access to the system can help reduce the risk of exploitation. Regular security updates and monitoring for unusual activity are also recommended.