svc_supportassist Root Command Execution

The vulnerability of the svcsupportassist utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this...

CVE-2024-22226

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges...

CVE-2024-22225

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges...

CVE-2024-22226

Dell Unity prior to version 5.4 contains a path traversal vulnerability in the svc_supportassist utility. An authenticated attacker could exploit this to gain unauthorized write access to server filesystem with elevated privileges. Affected product/version: Dell Unity, before 5.4; Root cause: pat...

CVE-2024-22226

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges...

CVE-2024-22226

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges...

CVE-2024-22225

Dell Unity is affected by CVE-2024-22225 in versions prior to 5.4, where the svc_supportassist utility allows OS command injection. An authenticated, local attacker could execute arbitrary commands with root privileges; CVSSv3.1 score 7.8 (HIGH) with local access, low attack complexity and no use...

Dell Unity Path Traversal Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell, Inc. A path traversal vulnerability exists in Dell Unity prior to version 5.4, which stems from the inclusion of a path traversal vulnerability in its svcsupportassist utility...

CVE-2024-22225: Improper Neutralization of Special Elements used in an OS Command

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges...

CVE-2024-22226: Relative Path Traversal

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges...