CVE-2025-24382
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Mar 28, 2025
CWE ID 78
Summary
CVE-2025-24382 is a critical vulnerability affecting Dell Unity versions 5.4 and below. This issue involves improper neutralization of special elements in OS commands, allowing an unauthenticated attacker with remote access to execute arbitrary commands, potentially leading to serious security consequences. Exploitation of this OS Command Injection vulnerability could result in attackers gaining control over the affected system. Users are strongly urged to update to the latest version of Dell Unity to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Unity