CVE-2025-24383

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-24383

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

D

ell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is considered critical as it can be leveraged to delete critical system files as root. Dell recommends customers to upgrade at the earliest opportunity.

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*
History

08 Jul 2025, 16:33

Type Values Removed Values Added
First Time Dell unity Operating Environment
Dell
Summary
  • (es) Dell Unity, versión 5.4 y anteriores, contiene una vulnerabilidad de neutralización incorrecta de elementos especiales utilizada en un comando del sistema operativo (inyección de comandos del sistema operativo). Un atacante no autenticado con acceso remoto podría explotar esta vulnerabilidad para eliminar archivos arbitrarios. Esta vulnerabilidad se considera crítica, ya que puede utilizarse para eliminar archivos críticos del sistema como root. Dell recomienda a sus clientes actualizar a la versión más reciente lo antes posible.
References () https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities - Vendor Advisory
CPE cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*

28 Mar 2025, 03:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 9.1
Summary (en) Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command Vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges (en) Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is considered critical as it can be leveraged to delete critical system files as root. Dell recommends customers to upgrade at the earliest opportunity.

28 Mar 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-28 02:15

Updated : 2025-07-08 16:33

NVD link : CVE-2025-24383

Mitre link : CVE-2025-24383

CVE.ORG link : CVE-2025-24383

JSON object : View

Products Affected

dell

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')