CVE-2024-22226CWE-23
Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility
Low · published February 12, 2024
What it is
Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges.
The record
Technical detail
- CVSS v3.1
- 3.3 · LOW
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00354 · 27.9th percentile
- Weakness
- CWE-23 · Relative Path Traversal
- Published
- 2024-02-12T18:55Z
EPSS history
Timeline