CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- Published Sep 15, 2021
- CVSS 9.8 critical
- 99.9% chance of exploitation in the next 30 days (EPSS)
- In CISA's Known Exploited Vulnerabilities catalog
- A Metasploit module exploits it
- A fix is available
Affected software
- Microsoft Azure Automation State Configuration DSC Extension
- Microsoft Azure Automation Update Management
- Microsoft Azure Diagnostics
- Microsoft Azure Security Center
- Microsoft Azure Sentinel
- Microsoft Azure Stack Hub
- Microsoft Container Monitoring Solution
- Microsoft Log Analytics Agent
- Microsoft Open Management Infrastructure
- Microsoft System Center Operations Manager