Skip to content
OpenAdvisories
High · 7.8 CVE-2024-22222 EUVD-2024-19798GHSA-rxqh-jwfh-ppgw

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated maliciou…

Published Feb 12, 2024 · Updated Aug 1, 2024 · Assigned by dell

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.

Affected products

VendorProductAffectedFixed
Dell Unity < 5.4 5.4

References