CVE-2025-46422 in Unity

Resumen

por MITRE • 2025-10-30

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Dell
• Reservar: 2025-04-24
• Divulgación: 2025-10-30
• Moderación: aceptado
• Artículo: VDB-330578
• CPE: listo
• CWE: CWE-78 (confirmado)
• CVSS: 7.8 (CNA)
• EPSS: 0.00511
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-46422
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-46422
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-46422/