PT-2025-31809 · Dell · Dell Unity

Published

2025-08-04

·

Updated

2025-08-04

·

CVE-2025-36604

CVSS v3.1
7.3
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

Dell Unity versions prior to 5.5

Description:

Dell Unity versions 5.5 and prior contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A remote, unauthenticated attacker could potentially execute arbitrary commands.

Recommendations:

Update Dell Unity to a version later than 5.5.

Fix

OS Command Injection

Weakness Enumeration

Related Identifiers

CVE-2025-36604

Affected Products

Dell Unity