CVE-2024-22226: Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit…

medium6.5CVSS 3.1

AVNACLPRLUINSUCNIHAN

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	unity	< 5.4	5.4
dell	unity_operating_environment	< 5.4.0.0.5.094	5.4.0.0.5.094