Skip to content
OpenAdvisories
High · 7.8 CVE-2024-49563 EUVD-2024-54318GHSA-562x-p5vr-cmj9

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio…

Published Mar 28, 2025 · Updated Feb 26, 2026 · Assigned by dell

Description

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges and elevation of privileges.

Affected products

VendorProductAffectedFixed
Dell Unity N/A – < 5.5.0.0.5.259 5.5.0.0.5.259

References