CNNVD-202601-5083 Information

CNNVD ID

CNNVD-202601-5083

CVE-2026-22277

  • CNNVD Published: 2026-01-30

Description (Chinese)

Dell UnityVSA是美国戴尔(Dell)公司的一套虚拟Unity存储环境。 Dell UnityVSA 5.4及之前版本存在操作系统命令注入漏洞,该漏洞源于特殊元素中和不当,可能导致本地低权限攻击者执行任意命令。

Description (English)

Dell Unity VSA is a virtual Unity storage environment for Dell. Dell Unity VSA 5.4 and earlier versions had incorporated a loophole in the operating system, which stemmed from the incompetence of special elements, which could lead to arbitrary orders being carried out by local low-authority attackers.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

戴尔

Published

2026-01-30

Last Modified

2026-02-24

References

https://www.dell.com/support/kbdoc/en-us/000421197/dsa-2026-054-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities

Patch

https://www.dell.com/support/kbdoc/en-us/000421197/dsa-2026-054-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities

Share on: