9.8
CVE-2021-38647
- EPSS 94.31%
- Published 15.09.2021 12:15:15
- Last modified 07.03.2025 21:54:07
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
Open Management Infrastructure Remote Code Execution Vulnerability
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Azure Automation State Configuration Version-
Microsoft ≫ Azure Automation Update Management Version-
Microsoft ≫ Azure Diagnostics (lad) Version-
Microsoft ≫ Azure Open Management Infrastructure Version-
Microsoft ≫ Azure Security Center Version-
Microsoft ≫ Azure Sentinel Version-
Microsoft ≫ Azure Stack Hub Version-
Microsoft ≫ Container Monitoring Solution Version-
Microsoft ≫ Log Analytics Agent Version-
Microsoft ≫ System Center Operations Manager Version-
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 94.31% | 0.999 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| secure@microsoft.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|