Dell Unity Command Injection Vulnerability (CNVD-2024-09154)

2024-02-1900:00:00

China National Vulnerability Database

www.cnvd.org.cn

dell unity

storage array

command injection

vulnerability

local attacker

root privileges

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute arbitrary operating system commands with root privileges.

CPENameOperatorVersion
dell unitylt5.4

CPE	Name	Operator	Version
	dell unity	lt	5.4