CVE-2024-0170

Dell Unity firmware vulnerability CVE-2024-0170 affects versions prior to 5.4. The root cause is an OS command injection in the svc_cava utility that could be exploited by an authenticated local attacker to escape the restricted shell and run arbitrary OS commands with root privileges. Impact is ...