Skip to content
OpenAdvisories
High · 7.8 CVE-2025-24378 EUVD-2025-8545GHSA-hr9f-jjcw-jcr8

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio…

Published Mar 28, 2025 · Updated Feb 26, 2026 · Assigned by dell

Description

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.

Affected products

VendorProductAffectedFixed
Dell Unity N/A – < 5.5.0.0.5.259 5.5.0.0.5.259

References