CVE-2021-38647: Open Management Infrastructure Remote Code Execution Vulnerability

Published Sep 15, 2021

Updated

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Other sources

Open Management Infrastructure Remote Code Execution Vulnerability

— NVD

Affected Software

11 affected components

Microsoft Open Management Infrastructure (OMI)

Microsoft Azure Automation State Configuration

Microsoft Azure Automation Update Management

Microsoft Azure Diagnostics \(lad\)

Microsoft Azure Open Management Infrastructure

Microsoft Azure Security Center

Microsoft Azure Sentinel

Microsoft Azure Stack Hub

Microsoft Container Monitoring Solution

Microsoft Log Analytics Agent

Microsoft System Center Operations Manager

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647

Event History

Sep 15, 2021

CVE Published

via MITRE·11:24 AM

Data Sourced

via MITRE·11:24 AM

DescriptionSeverity

Data Sourced

via NVD·12:15 PM

RemedyDescriptionSeverityAffected Software

Nov 3, 2021

Known Exploited

via CISA·12:00 AM

Known Ransomware

via CISA·12:00 AM

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-38647.

What is the title of this vulnerability?

The title of this vulnerability is Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability.

What is the severity of CVE-2021-38647?

The severity of CVE-2021-38647 is critical with a CVSS score of 9.8.

Which software is affected by CVE-2021-38647?

The software affected by CVE-2021-38647 includes Microsoft Open Management Infrastructure (OMI), Microsoft Azure Automation State Configuration, Microsoft Azure Automation Update Management, and other related products.

How can this vulnerability be exploited?

This vulnerability can be exploited by an attacker remotely executing arbitrary code.