CVE Watch10 ago 2026

CVE-2021-38647

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS

9.8

Crítico

EPSS

99.9%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: 15 sept 2021 · Última mod.: 10 ago 2026

EPSS · 30d

99.7%EPSS · 30 días99.9%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidad

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38647

Descripción técnica

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-386497.0 ALT

85.9%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability20d CVE-2021-386487.8 ALT

95.7%

KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability20d CVE-2021-386457.8 ALT

85.0%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability20d