CVE-2025-31092
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 28, 2025
CWE ID 79
Summary
CVE-2024-49601 is a newly disclosed vulnerability affecting Dell Unity versions 5.4 and older. This issue involves Improper Neutralization of Special Elements used in an OS Command (OS Command Injection), making it exploitable by unauthenticated attackers. The vulnerability allows an attacker with remote access to potentially execute commands on the affected system, posing a significant security risk. Dell Unity users are strongly advised to update their software as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Click To Chat Plugin
Affected Vendors
- WordPress