Technical impact
Dell OpenManage Integration with Microsoft Windows Admin Center includes a remote code execution flaw in its gateway plugin. The vulnerability allows a remote authenticated user to execute arbitrary commands, effectively elevating privileges on the host system. The weakness is a classic command injection, aligned with CWE‑77.
Affected Systems
The vulnerable component is the Dell OpenManage Integration for Windows Admin Center. No specific product versions are listed in the advisory; all installations of the integration that contain the gateway plugin are potentially affected.
Risk and Exploitability
The CVSS score of 8.8 signifies a high severity issue. The EPSS score is below 1 %, indicating a low probability of exploitation at present. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires an authenticated session to the Windows Admin Center gateway plugin; the attacker would need legitimate credentials for the target system. Once authenticated, the attacker can trigger command execution remotely and gain elevated privileges on the host.
