CVE-2024-22224

CWE-78 — OS Command Injection4 documents4 sources

Severity

7.8HIGH

EPSS

0.2%

top 55.52%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell Unity Dell Unity Operating Environment

Timeline

PublishedFeb 12

Description

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDdell/unity_operating_environment< 5.4.0.0.5.094

▶CVEListV5dell/unity< 5.4

🔴Vulnerability Details

CVEList

CVE-2024-22224: Dell Unity, versions prior to 5↗2024-02-12

▶

GHSA

GHSA-qx5r-97f3-qmfh: Dell Unity, versions prior to 5↗2024-02-12

▶