7.3Alta
CVE-2024-49601
Descripción
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Debilidad (CWE):
CWE-78
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Dell | Unity | N/A – < 5.5.0.0.5.259 | |
| dell | unity operating environment | < 5.5.0.0.5.259 |
Referencias y parches
- https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-… vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*< 5.5.0.0.5.259