CVE-2021-43589: OS Command Injection
First published: Mon Jan 24 2022(Updated: )
Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS) command injection Vulnerability. A locally authenticated user with high privileges may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the Unity underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Unity Operating Environment | <5.1.2.0.5.007 | |
| Dell Emc Unity Xt Operating Environment | <5.1.2.0.5.007 | |
| Dell Emc Unityvsa Operating Environment | <5.1.2.0.5.007 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for the Dell EMC Unity OS command injection vulnerability?
The vulnerability ID for the Dell EMC Unity OS command injection vulnerability is CVE-2021-43589.
What is the severity level of CVE-2021-43589?
The severity level of CVE-2021-43589 is high (6.7).
Which Dell EMC products are affected by CVE-2021-43589?
Dell EMC Unity, Dell EMC UnityVSA, and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 are affected by CVE-2021-43589.
What is the potential impact of CVE-2021-43589?
A locally authenticated user with high privileges may potentially exploit CVE-2021-43589, leading to the execution of arbitrary OS commands.
Where can I find more information about CVE-2021-43589 and its remediation?
More information about CVE-2021-43589 and its remediation can be found at the following reference: [link](https://www.dell.com/support/kbdoc/en-us/000194836/dsa-2021-271-dell-emc-unity-dell-emc-unity-vsa-and-dell-emc-unity-xt-security-update-for-multiple-vulnerabilities)
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell emc unity operating environment
- canonical/dell emc unity xt operating environment
- canonical/dell emc unityvsa operating environment