Product:
Dell Unity
Summary
Dell Unity, versions 5.5 and prior, contain an OS Command Injection vulnerability due to improper neutralization of special elements. A low privileged attacker with local access could exploit this vulnerability to execute arbitrary commands with root privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-46423 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific commands that take advantage of the improper handling of special elements in the OS command execution process. By executing these commands, the attacker can gain root privileges and potentially compromise the entire system.
Affected Products
- Dell Unity 5.5 and prior: Vulnerable to OS Command Injection, allowing local attackers to execute arbitrary commands.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of Dell Unity that addresses this issue. Additionally, restricting local access to the system can help reduce the risk of exploitation.