CVE-2021-38647

Warnung

Exploit

EPSS 99.72%
Veröffentlicht 15.09.2021 12:15:15
Zuletzt bearbeitet 30.10.2025 19:13:53
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Open Management Infrastructure Remote Code Execution Vulnerability

Open Management Infrastructure Remote Code Execution Vulnerability

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 6

NVD 9 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Azure Automation State Configuration Version-

Microsoft ≫ Azure Automation Update Management Version-

Microsoft ≫ Azure Open Management Infrastructure Version-

Microsoft ≫ Azure Security Center Version-

Microsoft ≫ Azure Sentinel Version-

Microsoft ≫ Azure Stack Hub Version-

Microsoft ≫ Container Monitoring Solution Version-

Microsoft ≫ Log Analytics Agent Version-

Microsoft ≫ System Center Operations Manager Version-

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Schwachstelle

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	99.72%	1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
secure@microsoft.com	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H