CVE-2024-22224

Summary

CVE-2024-22224 is a critical vulnerability affecting Dell Unity versions below 5.4. An attacker with authentication can exploit this OS Command Injection flaw in the svc_nas utility. Successful exploitation allows the attacker to escape the restricted shell and execute arbitrary operating system commands with root privileges, posing a significant risk to system security. This vulnerability requires immediate attention and patching to prevent potential unauthorized system access and compromises.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.