The vulnerability of the svc_tcpdump utility in the Dell Unity Operating Environment’s management and data storage system allows a hacker to execute arbitrary commands.

The vulnerability of the svctcpdump utility in the Dell Unity Operating Environment’s storage management and functioning system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to...

CVE-2024-0166

Dell Unity contains an OS Command Injection in the svc_tcpdump utility for versions prior to 5.4. An authenticated, local attacker can exploit this to execute arbitrary OS commands with elevated privileges. The underlying issue is command parsing/input handling in svc_tcpdump, enabling command ex...