CVE-2024-0167 - Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility

Back Back to CVE browser

HIGH

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility

Published Feb 12, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.81%

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files on the file system with root privileges.

Affected products

Vendor Dell Product Unity Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Unity

unaffected

Version	Status	Constraints
0	affected	<5.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-15966
Advisory
https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-15966		Advisory
https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities		vendor-advisoryVendor Advisory