CVE-2025-43941
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low privileged attacker with local access could execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license.
Risk Assessment
An attacker with local access could gain full control of the system, potentially leading to data integrity and service availability compromise.
Recommendation
Install a valid license and apply available security updates for Dell Unity.
Other vulnerabilities in Dell Unity
See all- CVE-2025-46423High
Dell Unity, version(s) 5.5 and prior, contain an OS command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-46422High
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-43942High
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
- CVE-2025-43940High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
- CVE-2025-43939High
Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
Original NVD description (English source)
Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary command with root privileges. This vulnerability only affects systems without a valid license install.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS