CVE-2021-38647

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Open Management Infrastructure (OMI)

Date Added 2021-11-03

Remediation Due 2021-11-17

Ransomware Use CONFIRMED

https://nvd.nist.gov/vuln/detail/CVE-2021-38647

Affected Software (10)

Vendor	Product	Version
microsoft	azure_automation_state_configuration	-
microsoft	azure_automation_update_management	-
microsoft	azure_diagnostics_\(lad\)	-
microsoft	azure_security_center	-
microsoft	azure_sentinel	-
microsoft	azure_stack_hub	-
microsoft	container_monitoring_solution	-
microsoft	log_analytics_agent	-
microsoft	open_management_infrastructure	< 1.6.8-1
microsoft	system_center_operations_manager	-