Dell OpenManage Integration with Microsoft Windows Admin Center includes an OS Command Injection flaw that allows a low‑privileged attacker with remote access to run arbitrary commands on the host system. The vulnerability results from improper neutralization of special elements used in an OS command. If exploited, the attacker can achieve full remote code execution, compromising confidentiality, integrity, and availability of the affected systems.

The affected product is Dell OpenManage Integration for Microsoft Windows Admin Center. Versions before 3.7.0 are vulnerable. The issue applies to systems running these older releases hosting the integration service.

This flaw carries a CVSS score of 8.8, indicating high severity. EPSS is 2%, and it is not listed in CISA KEV, but the nature of the vulnerability—remote command execution—suggests that exploitation is possible with minimal privileges. The likely attack vector is remote network access from the attacker to the integration service; a low‑privileged account or compromised application can trigger the injection.