CVE-2024-0166: OS Command Injection
Published Feb 12, 2024
·Updated
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svctcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands with elevated privileges.
Affected Software
1 affected component
Dell Unity Operating Environment<5.4.0.0.5.094
Event History
Feb 12, 2024
CVE Published
via MITRE·06:27 PM
Data Sourced
via MITRE·06:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-0166?
CVE-2024-0166 is considered a critical severity vulnerability due to its potential for executing arbitrary OS commands with elevated privileges.
2
How do I fix CVE-2024-0166?
To fix CVE-2024-0166, upgrade to Dell Unity Operating Environment version 5.4 or later.
3
Who is affected by CVE-2024-0166?
CVE-2024-0166 affects Dell Unity operating environments prior to version 5.4.
4
What type of vulnerability is CVE-2024-0166?
CVE-2024-0166 is an OS Command Injection vulnerability found in the svc_tcpdump utility.
5
Can CVE-2024-0166 be exploited remotely?
CVE-2024-0166 requires authentication, so exploitation is limited to authenticated users.