CVE-2025-43939
BaseFortify
Publication date: 2025-10-30
Last updated on: 2025-11-03
Assigner: Dell
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dell | unity_operating_environment | to 5.5.2.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Dell Unity versions 5.4 and prior is an OS Command Injection flaw where a low privileged attacker with local access can exploit improper neutralization of special elements in OS commands. This allows the attacker to execute arbitrary commands on the system and potentially elevate their privileges.
How can this vulnerability impact me? :
Exploitation of this vulnerability can lead to unauthorized command execution and elevation of privileges by a low privileged local attacker, potentially compromising the confidentiality, integrity, and availability of the affected system.