CVE-2021-38647
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Published Sep 15, 2021 · updated Aug 10, 2026 · microsoft azure automation state configuration
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Timeline
Detection, updates, and resolution for this record.
Sep 15, 2021 · Catalog
Detected
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Nov 17, 2021 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 10, 2026 · Catalog
Updated
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date Nov 17, 2021
Affected
- cpe microsoft/azure automation state configurationversion unspecified
- cpe microsoft/azure automation update managementversion unspecified
- cpe microsoft/azure diagnostics (lad)version unspecified
- cpe microsoft/azure security centerversion unspecified
- cpe microsoft/azure sentinelversion unspecified
- cpe microsoft/azure stack hubversion unspecified
- cpe microsoft/container monitoring solutionversion unspecified
- cpe microsoft/log analytics agentversion unspecified
- vendor Microsoft Open Management Infrastructure (OMI)version unspecified
Sources
- CISA KEVCVE-2021-38647
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
cisa.gov - CVE.orgCVE-2021-38647
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-38647
30-day exploitation probability 99.9%
first.org - Metasploit Modulesexploit_linux/local/cve_2021_38648_omigod
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_linux/misc/cve_2021_38647_omigod
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
Packet Storm link already published on the finding.
packetstormsecurity.com