CVE-2024-0167
Dell
CVE-2024-0167 is a critical OS Command Injection vulnerability affecting Dell Unity systems. Prior to version 5.4, the svc_topstats utility allows an authenticated attacker to inject commands and overwrite arbitrary files with root privileges. Although the CVSS score is 7.8, the SOCRadar Vulnerability Risk Score (SVRS) is 70, indicating a significant risk that warrants attention. Successful exploitation grants an attacker full control over the affected Dell Unity system. This arbitrary file overwrite capability poses a serious threat to data integrity and system availability. The root privileges gained make this a high-impact vulnerability. Immediate patching is recommended to mitigate the risk of exploitation. The presence of the In The Wild tag further emphasizes the importance of addressing this CVE promptly.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.