Dell Unity Command Injection Vulnerability (CNVD-2024-09160)

2024-02-1900:00:00

China National Vulnerability Database

www.cnvd.org.cn

dell unity

hybrid storage array

command injection

local attacker

restricted shell

arbitrary commands

root privileges

AI Score

7.9

Confidence

High

EPSS

Percentile

9.6%

JSON

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to escape a restricted shell and execute arbitrary OS commands with root privileges.