The vulnerability in Dell OpenManage Enterprise arises from improper neutralization of argument delimiters in a command, allowing an attacker to inject malicious arguments into command execution. This flaw can lead to arbitrary command execution, potentially exposing sensitive system data or allowing further compromise. The weakness is identified as CWE-88, indicating that user provided input is not correctly sanitized before being passed to system commands.

Dell OpenManage Enterprise, versions released prior to 4.8.0, are affected. Administrators using these older iterations of the platform should be aware that any low‑privileged user with access over the local network may attempt to exploit the identified injection flaw.

The CVSS score of 4.6 categorizes this issue as medium severity, but the absence of an EPSS score and its lack of identification in the CISA KEV list provide no additional evidence of widespread exploitation. The likely attack vector requires a low‑privileged actor who can reach the OpenManage Enterprise system over an adjacent network. Successful exploitation would grant the attacker command execution privileges, potentially enabling a broader attack surface depending on the underlying server configuration.