CVE-2021-38647 — Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2021-38647

CVE-2021-38647: Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Microsoft
Product	Open Management Infrastructure (OMI)
Date added	2021-11-03
Due date	2021-11-17
Ransomware campaign use	Known

Description

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-38647

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-38647
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog