PT-2025-44407 · Dell · Dell Unity

Published 2025-10-30 · Updated 2025-11-07 · CVE-2025-46423

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Unity versions 5.5 and prior

Description Dell Unity versions 5.5 and earlier have an issue where special elements are not properly neutralized when used in operating system commands, potentially leading to OS Command Injection. An attacker with low privileges and local access could exploit this to execute arbitrary commands with root privileges.

Recommendations Update to a version of Dell Unity later than 5.5.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-46423

Affected Products

Dell Unity

References · 6

• https://osv.dev/vulnerability/CVE-2025-46423 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000385307/dsa-2025-379-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46423 · Security Note
• https://t.me/cveNotify/141598 · Telegram Post
• https://t.me/CVEtracker/36184 · Telegram Post
• https://t.me/cveNotify/142030 · Telegram Post