CVE-2025-46422: OS Command Injection
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46422?
CVE-2025-46422 is classified as a low severity OS Command Injection vulnerability.
How do I fix CVE-2025-46422?
To mitigate CVE-2025-46422, upgrade Dell Unity to version 5.6 or later.
Who is affected by CVE-2025-46422?
CVE-2025-46422 affects Dell Unity versions 5.5 and prior.
What type of vulnerability is CVE-2025-46422?
CVE-2025-46422 is an Improper Neutralization of Special Elements used in an OS Command, also known as OS Command Injection.
Can a low privileged attacker exploit CVE-2025-46422?
Yes, a low privileged attacker with local access could potentially exploit CVE-2025-46422 to execute arbitrary commands with root privileges.