CVE-2025-24382

CWE-78 — OS Command Injection3 documents3 sources

Severity

7.3HIGH

EPSS

3.0%

top 13.49%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell Unity Dell Unity Operating Environment

Timeline

PublishedMar 28

Description

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5dell/unityN/A — 5.5.0.0.5.259

▶NVDdell/unity_operating_environment< 5.5.0.0.5.259

🔴Vulnerability Details

CVEList

CVE-2025-24382: Dell Unity, version(s) 5↗2025-03-28

▶

GHSA

GHSA-p9r3-mw2q-69g9: Dell Unity, version(s) 5↗2025-03-28

▶