CVE-2021-38649

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
2.9%
EPSS
87%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Vendor
Microsoft
Product
Open Management Infrastructure (OMI)
Added to KEV
Nov 3, 2021
Remediation due
Nov 17, 2021 (US federal deadline)
Ransomware use
Not known
EPSS
2.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded