BaseFortify

Publication date: 2025-10-30

Last updated on: 2025-11-03

Assigner: Dell

Description

Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary command with root privileges. This vulnerability only affects systems without a valid license install.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-30

Last Modified

2025-11-03

Generated

2026-07-06

AI Q&A

2025-10-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43941

Affected Vendors & Products

Vendor	Product	Version / Range
dell	unity_operating_environment	to 5.5.2.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an OS Command Injection in Dell Unity versions 5.5 and prior. It allows a low privileged attacker with local access to execute arbitrary commands with root privileges on systems that do not have a valid license installed.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain root-level control over the affected system, potentially leading to full system compromise, unauthorized data access, or disruption of services.

Hi! I’m here to help you understand CVE-2025-43941. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70