ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.Referenceshttps://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html