Product:
UnityVSA
Summary
Dell UnityVSA versions 5.4 and prior contain an improper neutralization of special elements used in an OS command vulnerability. A low privileged attacker with local access could exploit this vulnerability, leading to arbitrary command execution with root privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-22277 |
Exploitation
To exploit this vulnerability, an attacker with local access can craft specific OS commands that are improperly handled by the system. By executing these commands, the attacker can gain root privileges and perform unauthorized actions on the system, potentially compromising sensitive data and system functionality.
Affected Products
- UnityVSA 5.4 and prior: Vulnerable to OS command injection, allowing arbitrary command execution.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell UnityVSA that addresses this issue. Additionally, restricting local access to the system and implementing proper security measures can help reduce the risk of exploitation.