CVE-2024-0167

published 2024-02-12

CVE-2024-0167: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authenticated attacker could potentially…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files on the file system with root privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	unity	< 5.4	5.4
dell	unity_operating_environment	< 5.4.0.0.5.094	5.4.0.0.5.094

CWE-78