PT-2023-28677 · Dell · Dell Unity

Published 2023-10-23 · Updated 2023-10-28 · CVE-2023-43066

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Unity versions prior to 5.3

Description The issue allows an authenticated, local attacker to exploit a Restricted Shell Bypass vulnerability by authenticating to the device CLI and issuing certain commands.

Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-43066

Affected Products

Dell Unity

References · 5

• https://osv.dev/vulnerability/CVE-2023-43066 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43066 · Security Note
• https://twitter.com/VulmonFeeds/status/1716523435562508530 · Twitter Post
• https://twitter.com/CVEnew/status/1716473690567663685 · Twitter Post