Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Dell Unity versions 5.4 and prior allow attackers to execute system commands

CVE-2025-24378 · published 1 year ago
Summary

Dell Unity versions 5.4 and prior have a security flaw that could allow an attacker with some access rights to execute system commands. This could lead to unauthorized actions on the system. Update to a fixed version to prevent this risk.

What to do
  • Update dell unity_operating_environment to version 5.5.0.0.5.259 or later.
Affected software
VendorProductAffected versions
dell unity_operating_environment < 5.5.0.0.5.259
cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*
Original advisory text
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local ac...
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published28 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-24378 · NVD
Track software like this
Free during beta