Dell DM5500 Operating System Command Injection Vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an operating system command injection vulnerability that stems from a failure to properly filter construct command special characters, commands, etc. in the PPOE component, which can be exploited by an attacker to execute arbitrary operating system commands on the underlying operating system.