PT-2025-44405 · Dell · Dell Unity

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-43941

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.5 and prior

Description Dell Unity versions 5.5 and prior contain an Improper Neutralization of Special Elements used in an OS Command Injection issue. An attacker with local access and low privileges could potentially execute arbitrary commands with root privileges. This issue only affects systems without a valid license installed.

Recommendations Ensure a valid license is installed on all affected systems.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-43941

Affected Products

Dell Unity

References · 6

• https://dell.com/support/kbdoc/en-us/000385307/dsa-2025-379-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43941 · Security Note
• https://t.me/cveNotify/140957 · Telegram Post
• https://t.me/CVEtracker/36187 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1983950340291448939 · Twitter Post