← Back to browse · API

CVE-2025-22398

Severity
CRITICAL
CVSS
9.8
EPSS
0.02131
Risk score
39.95
CISA KEV
No
PoC
No
Published
2025-03-28
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-8535, GHSA-JFXX-2225-HWX8
Products
Dell:Unity N/A <5.5.0.0.5.259
Sources
euvd EUVD-2025-8535

Description

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it can be leveraged to completely compromise the operating system. Dell recommends customers to upgrade at the earliest opportunity.

References