9.8
Critical
Exploited
· ransomware
CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-1390
Description
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Open Management Infrastructure 16.0 | 16.0 → latest | No fix stated |
| System Center Operations Manager (SCOM) 1.0 | 1.0.0 → latest | No fix stated |
| Azure Automation State Configuration, DSC Extension 2.0 | 2.0.0 → latest | No fix stated |
| Azure Automation Update Management 1.0 | 1.0.0 → latest | No fix stated |
| Log Analytics Agent 1.0 | 1.0.0 → latest | No fix stated |
| Azure Diagnostics (LAD) 3.0 | 3.0.0 → latest | No fix stated |
| Container Monitoring Solution 1.0 | 1.0.0 → latest | No fix stated |
| Azure Security Center 1.0 | 1.0.0 → latest | No fix stated |
| Azure Sentinel 1.0 | 1.0.0 → latest | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Stack Hub 1.0 | 1.0.0 → latest | No fix stated |
References
- Open Management Infrastructure (OMI) Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Open Management Infrastructure
The 8 CVEs of Open Management Infrastructure →
CVE-2024-21334
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
9.8
Critical
CVE-2024-21330
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
High
CVE-2022-33640
System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
High
CVE-2022-29149
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
High