CVE-2021-38648
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CVSS
7.8
High
EPSS
11.4%
p96
KEV
YES
Nov 3, 2021
Exploit Today
79
0-100
Published: Sep 15, 2021 · Last modified: Aug 10, 2026
Product
Microsoft / Open Management Infrastructure (OMI)
Vulnerability
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
Nov 17, 2021
Known ransomware use
No
Summary description
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38648
- packetstormsecurity.comhttp://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38648