CVE-2021-38647: Open Management Infrastructure Remote Code Execution Vulnerability

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-38647.

Q: What is the title of this vulnerability?

The title of this vulnerability is Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability.

Q: What is the severity of CVE-2021-38647?

The severity of CVE-2021-38647 is critical with a CVSS score of 9.8.

Q: Which software is affected by CVE-2021-38647?

The software affected by CVE-2021-38647 includes Microsoft Open Management Infrastructure (OMI), Microsoft Azure Automation State Configuration, Microsoft Azure Automation Update Management, and other related products.

Q: How can this vulnerability be exploited?

This vulnerability can be exploited by an attacker remotely executing arbitrary code.

Published Sep 14, 2021

Updated

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Other sources

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

— Microsoft

Open Management Infrastructure Remote Code Execution Vulnerability

Affected Software

22 affected componentsFixes available

Microsoft Open Management Infrastructure (OMI)

Microsoft Azure Automation State Configuration

Microsoft Azure Automation Update Management

Microsoft Azure Diagnostics \(lad\)

Microsoft Azure Open Management Infrastructure

Microsoft Azure Security Center

Microsoft Azure Sentinel

Microsoft Azure Stack Hub

Microsoft Container Monitoring Solution

Microsoft Log Analytics Agent

Microsoft System Center Operations Manager

Microsoft Azure Stack Hub<Monitor, Update and Config Mgmnt 1.14.01, <3.1.135

Monitor, Update and Config Mgmnt 1.14.013.1.135

Microsoft Azure Sentinel<OMS Agent for Linux GA v1.13.40-0

OMS Agent for Linux GA v1.13.40-0

Microsoft Azure Security Center<OMS Agent for Linux GA v1.13.40-0

OMS Agent for Linux GA v1.13.40-0

Microsoft Container Monitoring Solution

Microsoft Azure Automation Update Management<OMS Agent for Linux GA v1.13.40-0

OMS Agent for Linux GA v1.13.40-0

Microsoft Azure Diagnostics (LAD)<LAD v4.0.13 and LAD v3.0.135

LAD v4.0.13 and LAD v3.0.135

Microsoft Azure Automation State Configuration, DSC Extension<DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3

DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3

Microsoft Log Analytics Agent<OMS Agent for Linux GA v1.13.40-0

OMS Agent for Linux GA v1.13.40-0

Microsoft Open Management Infrastructure<OMI Version 1.6.8-1

OMI Version 1.6.8-1

Microsoft System Center Operations Manager (SCOM)<OMI version: 1.6.8-1

OMI version: 1.6.8-1

Microsoft Open Management Infrastructure<1.6.8-1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647

Patch Available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647

Event History

Sep 14, 2021

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·02:00 PM

Affected Software

Updated

via Microsoft·02:00 PM

Description

Sep 15, 2021

CVE Published

via MITRE·11:24 AM

Data Sourced

via MITRE·11:24 AM

DescriptionSeverity

Data Sourced

via NVD·12:15 PM

RemedyDescriptionSeverityAffected Software

Nov 3, 2021

Known Exploited

via CISA·12:00 AM

Known Ransomware

via CISA·12:00 AM

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-38647.

What is the title of this vulnerability?

The title of this vulnerability is Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability.

What is the severity of CVE-2021-38647?

The severity of CVE-2021-38647 is critical with a CVSS score of 9.8.

Which software is affected by CVE-2021-38647?

The software affected by CVE-2021-38647 includes Microsoft Open Management Infrastructure (OMI), Microsoft Azure Automation State Configuration, Microsoft Azure Automation Update Management, and other related products.

How can this vulnerability be exploited?

This vulnerability can be exploited by an attacker remotely executing arbitrary code.

CVE-2021-38647: Open Management Infrastructure Remote Code Execution Vulnerability

Other sources

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

What is the title of this vulnerability?

What is the severity of CVE-2021-38647?

Which software is affected by CVE-2021-38647?

How can this vulnerability be exploited?

Company

Resources

Contact