{"id":"CVE-2025-36604","published":"2025-08-04T14:00:05Z","modified":"2026-02-26T17:50:01Z","title":"Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…","vendor":"Dell","product":"Unity","tier":"core","eol":null,"affectedVersions":[{"vendor":"Dell","product":"Unity","versions":[">= N/A, < 5.5.1"]}],"description":{"text":"Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an OS command injection weakness (improper neutralization of special elements used in an OS command) in Dell Unity, versions 5.5 and prior. An unauthenticated attacker with remote network access could exploit it without any user interaction to execute arbitrary commands.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:18Z"},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.66555,"percentile":0.99283,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-10-09","exploitedFirstSeen":"2025-10-09","ransomware":false,"evidence":[{"url":"https://app.crowdsec.net/cti/cve-explorer/CVE-2025-36604","date":"2025-10-09"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-si/000350756/dsa-2025-281-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities","tags":["vendor-advisory"]},{"url":"https://labs.watchtowr.com/its-never-simple-until-it-is-dell-unityvsa-pre-auth-command-injection-cve-2025-36604/","tags":["technical-description"]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604","tags":["exploit"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-23501","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23501","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-09-29","earliestUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604","repos":[{"name":"watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604","url":"https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604","stars":2,"created":"2025-09-29"}]},"nuclei":[{"id":"CVE-2025-36604","name":"Dell UnityVSA < 5.5 - Remote Command Injection","severity":"critical","path":"http/cves/2025/CVE-2025-36604.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36604.yaml"}],"first":{"date":"2025-09-29","source":"PoC-in-GitHub","url":"https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604"},"provenance":"source"},"exploitRefs":["https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604"],"flow":[],"timeline":[{"date":"2025-08-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-36604","provenance":"source"},{"date":"2025-09-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604","provenance":"source"},{"date":"2025-10-09","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://app.crowdsec.net/cti/cve-explorer/CVE-2025-36604","provenance":"source"}],"speed":{"daysToPublicExploit":56,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":65.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 386 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9928"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 PoC-in-GitHub repo; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.11,"detail":"base score 7.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}