CVE Catalog

CVE-2025-43939

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.58%

46th percentile - higher than 46% of all known CVEs

Summary

Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.

Risk Assessment

Risk of unauthorized control over the system by a local user, potentially leading to data integrity and confidentiality breaches.

Recommendation

Immediately update Dell Unity to the latest available version that fixes this vulnerability. Restrict local access to trusted users only.

Other vulnerabilities in Dell Unity

See all
Original NVD description (English source)

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS