CVE-2021-43589: OS Command Injection
Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS) command injection Vulnerability. A locally authenticated user with high privileges may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the Unity underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Dell EMC Unity OS command injection vulnerability?
The vulnerability ID for the Dell EMC Unity OS command injection vulnerability is CVE-2021-43589.
What is the severity level of CVE-2021-43589?
The severity level of CVE-2021-43589 is high (6.7).
Which Dell EMC products are affected by CVE-2021-43589?
Dell EMC Unity, Dell EMC UnityVSA, and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 are affected by CVE-2021-43589.
What is the potential impact of CVE-2021-43589?
A locally authenticated user with high privileges may potentially exploit CVE-2021-43589, leading to the execution of arbitrary OS commands.
Where can I find more information about CVE-2021-43589 and its remediation?
More information about CVE-2021-43589 and its remediation can be found at the following reference: [link](https://www.dell.com/support/kbdoc/en-us/000194836/dsa-2021-271-dell-emc-unity-dell-emc-unity-vsa-and-dell-emc-unity-xt-security-update-for-multiple-vulnerabilities)