CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-49564

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges and elevation of privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.9%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities

Products affected by CVE-2024-49564

Dell » Unity Operating Environment » Version: N/A

cpe:2.3:a:dell:unity_operating_environment:-
Dell » Unity Operating Environment » Version: 5.0.7.0.5.008

cpe:2.3:a:dell:unity_operating_environment:5.0.7.0.5.008
Dell » Unity Operating Environment » Version: 5.2.0.0.5.173

cpe:2.3:a:dell:unity_operating_environment:5.2.0.0.5.173
Dell » Unity Operating Environment » Version: 5.3.0.0.5.120

cpe:2.3:a:dell:unity_operating_environment:5.3.0.0.5.120
Dell » Unity Operating Environment » Version: 5.4.0.0

cpe:2.3:a:dell:unity_operating_environment:5.4.0.0
Dell » Unity Operating Environment » Version: 5.4.0.0.5.094

cpe:2.3:a:dell:unity_operating_environment:5.4.0.0.5.094

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-49564

Products

Pricing

Contact Us