CVE-2025-24380
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 28, 2025
CWE ID 78
Summary
CVE-2025-24380 is a security vulnerability affecting Dell Unity versions 5.4 and older. This issue involves an Os Command Injection flaw, where a low privileged attacker with local access can inject malicious commands into the system. Successful exploitation of this weakness could result in command execution and privilege escalation, posing a significant risk to the affected system. Users are strongly advised to apply the necessary patches as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Unity