Summary
Ein Angreifer kann mehrere Schwachstellen in Dell Unity ausnutzen, um beliebigen Programmcode auszuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
Dell EMC Unity ist eine vereinheitliche Speicherlösung.
Vulnerabilities 4
-
High 7.8
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nfssupport utility. A…
-
High 7.8
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nas utility. An authe…
-
High 7.3
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command (…
-
Medium 6.1
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross…
Revision history
-
#1
Initiale Fassung
References
-
Security Update for Dell Unity vom 2025-08-04
https://www.dell.com/support/kbdoc/de-de/000350756/dsa-2025-281-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities