Dell OpenManage Enterprise versions prior to 4.8.0 contain a flaw that fails to neutralize special characters used in OS commands, allowing a low‑privileged attacker who can reach the system remotely to execute arbitrary commands. The vulnerability is classified as an OS Command Injection (CWE‑78) and would let the attacker obtain system‑level access or compromise the integrity of the managed environment.

The problem affects Dell OpenManage Enterprise products running any release earlier than 4.8.0, including older enterprise‑grade installations that have not applied the Dell patch supporting the 4.8.0 release. Systems with remote management interfaces accessible to unprivileged users are susceptible.

The CVSS score of 8.8 indicates a high severity. No EPSS score is publicly available, so exploitation probability remains uncertain, but the lack of a KEV listing suggests no known active exploitation. The attack can be launched remotely by an attacker who has low‑privilege credentials or network presence, potentially leading to full system compromise if the command execution succeeds.