CVE-2025-43942
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
Risk Assessment
A low-privileged attacker can execute arbitrary system commands, potentially leading to privilege escalation and full system compromise.
Recommendation
Apply security updates provided by Dell for Dell Unity.
Other vulnerabilities in Dell Unity
See all- CVE-2025-46423High
Dell Unity, version(s) 5.5 and prior, contain an OS command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-46422High
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-43941High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low privileged attacker with local access could execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license.
- CVE-2025-43940High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
- CVE-2025-43939High
Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
Original NVD description (English source)
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS