CVE-2025-43940
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
Risk Assessment
Risk of unauthorized control over the system by a local user, potentially leading to data integrity and confidentiality breaches.
Recommendation
Immediately update Dell Unity to the latest available version that fixes this vulnerability. Restrict local access to trusted users only.
Other vulnerabilities in Dell Unity
See all- CVE-2025-46423High
Dell Unity, version(s) 5.5 and prior, contain an OS command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-46422High
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-43942High
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
- CVE-2025-43941High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low privileged attacker with local access could execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license.
- CVE-2025-43939High
Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
Original NVD description (English source)
Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

