CVE-2023-43066: OS Command Injection
Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an authenticated, local attacker to exploit this vulnerability by authenticating to the device CLI and issuing certain commands.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43066?
CVE-2023-43066 is a vulnerability that affects Dell Unity prior to version 5.3 and allows an authenticated, local attacker to bypass the restricted shell and execute certain commands.
What is the severity of CVE-2023-43066?
The severity of CVE-2023-43066 is high, with a severity value of 7.8.
How can an attacker exploit CVE-2023-43066?
An attacker can exploit CVE-2023-43066 by authenticating to the device CLI and issuing certain commands.
Which software versions are affected by CVE-2023-43066?
Dell Unity Operating Environment, Dell Unity Xt Operating Environment, and Dell Unityvsa Operating Environment versions up to 5.3.0.0.5.120 are affected by CVE-2023-43066.
Where can I find more information about CVE-2023-43066?
You can find more information about CVE-2023-43066 in the Dell support article at the following link: [Dell Unity Security Update](https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities).