CVE-2021-38645
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CVSS
—
Sin CVSS
EPSS
1.9%
p77
KEV
SÍ
3 nov 2021
Exploit Today
73
0-100
Publicado: — · Última mod.: —
1.8%EPSS · 30 días1.9%
2026-06-302026-07-16
Producto
Microsoft / Open Management Infrastructure (OMI)
Vulnerabilidad
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
17 nov 2021
Uso conocido en ransomware
No
Descripción resumida
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-38645
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-38647—100.0%
KEV—80Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability—CVE-2021-38648—95.5%
KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—CVE-2021-38649—78.5%
KEV—74Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—