Dell Unity Vulnerability: Authenticated Attackers Can Execute Commands with Root Privileges

CVE-2024-22227

What is CVE-2024-22227?

Dell Unity, specifically in versions prior to 5.4, is affected by an OS Command Injection vulnerability found in its svc_dc utility. This flaw allows an authenticated attacker to execute system-level commands, potentially gaining root privileges. Exploitation of this vulnerability poses a significant risk to the security and integrity of the system, allowing unauthorized access to sensitive operations and data.

References