Dell OpenManage Enterprise OS Command Injection Vulnerability (CNVD-2021-92459)

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers in a single console.An operating system command injection vulnerability exists in the RACADM and IPMI tools in versions prior to Dell OpenManage Enterprise 3.6.1. An authenticated remote attacker could exploit this vulnerability to execute arbitrary operating system commands.