Skip to content
OpenAdvisories
High · 7.8 CVE-2024-22223 EUVD-2024-19799GHSA-w7cw-5xhj-4wf4

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authenticated malicious us…

Published Feb 12, 2024 · Updated May 7, 2025 · Assigned by dell

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.

Affected products

VendorProductAffectedFixed
Dell Unity < 5.4 5.4

References