Vulnerability Details CVE-2021-38647
Open Management Infrastructure Remote Code Execution Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.943
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Proposed Action
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Ransomware Campaign
Known
References
- http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
- http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
Products affected by CVE-2021-38647
-
cpe:2.3:a:microsoft:azure_automation_state_configuration:-
-
cpe:2.3:a:microsoft:azure_automation_update_management:-
-
cpe:2.3:a:microsoft:azure_diagnostics_(lad):-
-
cpe:2.3:a:microsoft:azure_open_management_infrastructure:-
-
cpe:2.3:a:microsoft:azure_security_center:-
-
cpe:2.3:a:microsoft:azure_sentinel:-
-
cpe:2.3:a:microsoft:azure_stack_hub:-
-
cpe:2.3:a:microsoft:container_monitoring_solution:-
-
cpe:2.3:a:microsoft:log_analytics_agent:-
-
cpe:2.3:a:microsoft:system_center_operations_manager:-