CVE-2024-22222

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 12, 2024
Updated: Feb 16, 2024
CWE ID 78

Summary

CVE-2024-22222 is a critical OS Command Injection vulnerability affecting Dell Unity versions below 5.4. Malicious users with local access to the system can exploit this vulnerability in the svc_udoctor utility. Successful exploitation allows the attacker to execute arbitrary OS commands with the privileges of the vulnerable application, potentially causing significant damage to the underlying operating system. This vulnerability poses a serious threat and requires immediate attention and patching from Dell Unity users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share