CVE-2024-22222

published 2024-02-12

CVE-2024-22222: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated malicious user with local…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	unity	< 5.4	5.4
dell	unity_operating_environment	< 5.4.0.0.5.094	5.4.0.0.5.094

CWE-78