CVE-2025-24386
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 28, 2025
CWE ID 78
Summary
CVE-2025-24386 is a critical vulnerability affecting Dell Unity versions 5.4 and prior. An OS Command Injection flaw is present, which allows a low-privileged attacker with local access to execute arbitrary commands. This can result in command execution and a subsequent escalation of privileges, posing a significant threat to system security. Users are urged to update their Dell Unity software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Unity