Lucene search
HistoryFeb 12, 2024 - 7:15 p.m.
CVE-2024-22227
dell unity
command injection
authenticated attacker
root privileges
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability execute commands with root privileges.
Affected configurations
Node
dellunity_operating_environmentRange<5.4.0.0.5.094
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | unity_operating_environment | * | cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-22227
2024-02-12 18:37:41
cnvd
cnvd
Dell Unity Command Injection Vulnerability (CNVD-2024-09152)
2024-02-19 00:00:00
prion
prion
Command injection
2024-02-12 19:15:00
cve
cve
CVE-2024-22227
2024-02-12 19:15:12
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-22227