CVE-2025-43940: OS Command Injection
Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43940?
CVE-2025-43940 is rated as a low severity vulnerability that could allow command execution by a low privileged attacker.
How do I fix CVE-2025-43940?
To fix CVE-2025-43940, update your Dell Unity software to the latest version beyond 5.5.
Who is affected by CVE-2025-43940?
CVE-2025-43940 affects users of Dell Unity versions 5.5 and prior.
What type of vulnerability is CVE-2025-43940?
CVE-2025-43940 is an OS Command Injection vulnerability due to improper neutralization of special elements.
What can attackers potentially achieve with CVE-2025-43940?
Attackers could exploit CVE-2025-43940 to execute commands and elevate privileges on affected systems.