9.1
Critical
CVE-2020-5322 Dell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command injection vulnerability
Description
Dell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell OpenManage Enterprise Modular 1.10 | earliest → < 1.10 | 1.10 |