PT-2025-13430 · Dell · Dell Unity

Published 2025-03-27 · Updated 2025-04-02 · CVE-2025-24381

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.4 and prior

Description The issue is an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this, leading to a targeted application user being redirected to arbitrary web URLs. This could be leveraged by attackers to conduct phishing attacks, causing users to divulge sensitive information. Exploitation may allow for session theft.

Recommendations For Dell Unity versions 5.4 and prior, update to a version later than 5.4 to resolve the issue. As a temporary workaround, consider restricting access to untrusted URLs to minimize the risk of exploitation. Avoid using the vulnerable URL redirection feature in Dell Unity until the issue is resolved.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2025-03554

CVE-2025-24381

Affected Products

Dell Unity

References · 12

• https://bdu.fstec.ru/vul/2025-03554 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24381 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24381 · Security Note
• https://twitter.com/RedTeamNewsBlog/status/1905546817166618696 · Twitter Post
• https://twitter.com/cracbot/status/1907387636634804320 · Twitter Post
• https://t.me/cvedetector/21359 · Telegram Post
• https://t.me/cvenotify/116669 · Telegram Post
• https://twitter.com/CVEnew/status/1905811700533678197 · Twitter Post
• https://twitter.com/CveFindCom/status/1905455337697685673 · Twitter Post
• https://t.me/latest_high_impact_cve/2059 · Telegram Post
• https://t.me/cvetracker/20139 · Telegram Post