CVE-2025-36604 PoC — Dell Unity 操作系统命令注入漏洞

Source

https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

Associated Vulnerability

Title:Dell Unity 操作系统命令注入漏洞 (CVE-2025-36604)
Description:Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.

Description

Detection Artefact Generator for Dell UnityVSA CVE-2025-36604

Readme


# watchTowr-vs-Dell-UnityVSA-CVE-2025-36604

Detection Artifact Generator for Dell UnityVSA CVE-2025-36604



https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023



See our [blog post](https://labs.watchtowr.com/) for technical details

# Detection in Action

```
python watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604.py --target https://192.168.5.45/ --command "touch /tmp/boom"
                         __         ___  ___________
         __  _  ______ _/  |__ ____ |  |_\__    ____\____  _  ________
         \ \/ \/ \__  \    ___/ ___\|  |  \|    | /  _ \ \/ \/ \_  __ \
          \     / / __ \|  | \  \___|   Y  |    |(  <_> \     / |  | \/
           \/\_/ (____  |__|  \___  |___|__|__  | \__  / \/\_/  |__|
                                  \/          \/     \/

        watchTowr-vs-Dell-UnityVSA-CVE-2025-36604.py

        (*) Dell UnityVSA Unauthenticated Remote Command Injection Detection Artifact Generator

          - Sina Kheirkhah (@SinSinology) of watchTowr (@watchTowrcyber)

        CVEs: [CVE-2025-36604]

[+] Sent exploit to https://192.168.5.45

```


# Description

This script attempts to detect if Dell UnityVSA is vulnerable to CVE-2025-36604

# Affected Versions

Versions prior to 5.5.1	are affected by this issue

For more information visit [Dell UnityVSA Security Update Notes](https://www.dell.com/support/kbdoc/en-uk/000350756/dsa-2025-281-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities)


# Follow [watchTowr](https://watchTowr.com) Labs

For the latest security research follow the [watchTowr](https://watchTowr.com) Labs Team 

- https://labs.watchtowr.com/

- https://x.com/watchtowrcyber

File Snapshot


 [4.0K]  /data/pocs/e6fcd28689b6cbf52693a738df16136ea7e4d204
├── [1.7K]  README.md
└── [1.4K]  watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604.py

1 directory, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!