CVE-2024-22225

Summary

CVE-2024-22225 is a critical vulnerability affecting Dell Unity versions before 5.4. This issue involves an OS Command Injection flaw in the svc_supportassist utility. An attacker with authentication access can take advantage of this vulnerability, resulting in the execution of arbitrary operating system commands with root privileges. This poses a significant risk, as an attacker could gain complete control over the affected system. Users are strongly advised to update to the latest version of Dell Unity to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.