CVE-2024-0165 - Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility

Back Back to CVE browser

HIGH

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility

Published Feb 12, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.95%

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges.

Affected products

Vendor Dell Product Unity Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Unity

unaffected

Version	Status	Constraints
0	affected	<5.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Feb 12, 2024

Updated May 6, 2025

Reserved Dec 14, 2023

Link CVE-2024-0165

CISA Vulnrichment

Updated Feb 12, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-0165

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-0165