CVE-2024-22226

LOW

Dell Unity <5.4 - Path Traversal

Title source: llm
STIX 2.1

Description

Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges.

Scores

CVSS v3 3.3
EPSS 0.0036
EPSS Percentile 58.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22 CWE-23
Status published
Products (1)
dell/unity_operating_environment < 5.4.0.0.5.094
Published Feb 12, 2024
Tracked Since Feb 18, 2026