Latest Dell EMC vulnerabilities #
On March 27th, 2025, Dell published a Security Advisory for Dell Unity, UnityVSA, and Unity XT products for multiple vulnerabilities that could allow a remote attacker to compromise affected assets.
- CVE-2025-22398 is rated critical with a CVSSv3 base score of 9.8.
- CVE-2025-24383 is rated critical with a CVSSv3 base score of 9.1.
- CVE-2025-24381 is rated high with a CVSSv3 base score of 8.8.
What is the impact? #
Successful exploitation of the vulnerabilities varies, but all are vulnerable to remote exploitation from an unauthenticated attacker. Exploitation of CVE-2025-22398 could lead to arbitrary command execution as the root user, which could result in a complete system take over. Exploitation of CVE-2025-24383 could lead to the deletion of arbitrary files, including critical system files accessible by the root user. Exploitation of CVE-2025-24381 could led to session theft and/or the ability to conduct phishing attacks.
Are updates or workarounds available? #
Dell has released a security update in 5.5.0.0.0.5.259, which can be found on their website. They strongly advise customers to upgrade to the remediated version as soon as possible.
How to find EMC Unity assets with runZero #
From the Asset Inventory, use the following query to locate potentially vulnerable assets:
os:"EMC Unity" AND osversion:<5.5.0.0.0.5.259
