Skip to content
OpenAdvisories
High · 7.8 CVE-2024-22228 EUVD-2024-19804GHSA-gm48-g823-rwch

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker…

Published Feb 12, 2024 · Updated May 7, 2025 · Assigned by dell

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.

Affected products

VendorProductAffectedFixed
Dell Unity < 5.4 5.4

References