CVE-2025-46422
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Risk Assessment
A local attacker with low privileges could gain full control over the system, potentially leading to data breach, service disruption, or further attacks within the network.
Recommendation
It is recommended to update Dell Unity to the latest available version that includes the fix. Also, restrict local access to the system to trusted personnel only.
Other vulnerabilities in Dell Unity
See all- CVE-2025-46423High
Dell Unity, version(s) 5.5 and prior, contain an OS command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2025-43942High
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
- CVE-2025-43941High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low privileged attacker with local access could execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license.
- CVE-2025-43940High
Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
- CVE-2025-43939High
Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.
Original NVD description (English source)
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS