Dell Unity Vulnerability: OS Command Injection Risk

CVE-2024-22223

Summary

An OS Command Injection vulnerability exists in Dell Unity, specifically within the svc_cbr utility. This flaw allows an authenticated malicious user with local access to exploit the vulnerability, potentially leading to the execution of arbitrary operating system commands. The execution would occur with the same privileges as the vulnerable application, posing significant risks to system integrity and security. Users of affected Dell Unity versions are encouraged to apply available security updates to mitigate this vulnerability.

References