CVE-2024-22226CWE-23

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility

Low · published February 12, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2024-02-12T18:55Z
EPSS history
Timeline
  • 12 FEB 18:55Z
    Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility
    cvelistv5