CVE Watch—

CVE-2021-38647

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

99.7%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.7%EPSS · 30 días99.7%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidad

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

17 nov 2021

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38647

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-38648—

95.5%

KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—CVE-2021-38649—

78.5%

KEV—74Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—CVE-2021-38645—

77.2%

KEV—73Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability—