CVE-2025-24386 in Unity情報

要約

〜によって MITRE • 2025年03月28日

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

Dell

予約する

2025年01月21日

公開

2025年03月28日

モデレーション

承諾済み

エントリ

VDB-301839

CPE

準備完了

CWE

CWE-78 (確認済み)

CVSS

7.8 (CNA)

EPSS

0.00537

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-24386
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-24386
CVE Details	https://www.cvedetails.com/cve/CVE-2025-24386/

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!