March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – APT Group Turla – Active IOCs
February 16, 2024
Rewterz Threat Update – Nation-State APT Groups Weaponize Artificial Intelligence and Large Language Modules for Cyber Attacks
February 16, 2024
Rewterz Threat Alert – APT Group Turla – Active IOCs
February 16, 2024
Rewterz Threat Update – Nation-State APT Groups Weaponize Artificial Intelligence and Large Language Modules for Cyber Attacks
February 16, 2024
Severity
High
Analysis Summary
CVE-2024-0164 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the svc_topstats utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with elevated privileges.
CVE-2024-0165 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the svc_acldb_dump utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with root privileges.
CVE-2024-0166 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the svc_tcpdump utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with elevated privileges.
CVE-2024-0167 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the svc_topstats utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with root privileges.
CVE-2024-0168 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by a command injection vulnerability in the svc_oscheck utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with root privileges.
CVE-2024-0169 CVSS:5.7
Dell Unity is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using a specially crafted URL to execute script in a victim’s Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVE-2024-0170 CVSS:7.8
Dell Unity could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the svc_cava utility. An attacker could exploit this vulnerability to execute arbitrary commands on the system with root privileges.
Impact
- Gain Access
- Cross-Site Scripting
Indicators Of Compromise
CVE
- CVE-2024-0164
- CVE-2024-0165
- CVE-2024-0166
- CVE-2024-0167
- CVE-2024-0168
- CVE-2024-0169
- CVE-2024-0170
Affected Vendors
Dell
Affected Products
- Dell EMC Unity 5.2
- Dell EMC Unity 5.3
Remediation
Refer to Dell Security Advisory for patch, upgrade or suggested workaround information.