Vulnerability in Dell Unity
CVE-2024-22229
Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker. An attacker could exploit this vulnerability to forge log entries, create false alarms, and inject malicious content into logs that compromise logs integrity. A malicious attacker could also prevent the product from logging information while malicious actions are performed or implicate an arbitrary user for malicious activities.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (22.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 23rd percentile — 22.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Dell Unity — versions 0
- Dell Unity Operating Environment — versions 5.3.0.0.5.120
- Dell Unityvsa Operating Environment — versions 5.3.0.0.5.120
- Dell Unity Xt Operating Environment — versions 5.3.0.0.5.120
Weakness classification (CWE)
References
- www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-an… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2024-22229?
- CVE-2024-22229 is a low-severity vulnerability in Dell Unity, classified under Improper Output Neutralization for Logs. CVSS score: 3.1/10. Published 2024-01-24.
- How severe is CVE-2024-22229?
- Low severity. CVSS v3 base score is 3.1 out of 10.