CVE-2024-0167

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files on the file system with root privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - security_alert@emc.com

Published

2024-02-12

Last modified

2025-05-06

Weaknesses

CWE-78

Affected products

• Unity (Dell)
• Unity Operating Environment (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-up…