Open Management Infrastructure Remote Code Execution Vulnerability
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Azure_automation_state_configuration | Microsoft | - (including) | - (including) |
| Azure_automation_update_management | Microsoft | - (including) | - (including) |
| Azure_diagnostics_(lad) | Microsoft | - (including) | - (including) |
| Azure_open_management_infrastructure | Microsoft | - (including) | - (including) |
| Azure_security_center | Microsoft | - (including) | - (including) |
| Azure_sentinel | Microsoft | - (including) | - (including) |
| Azure_stack_hub | Microsoft | - (including) | - (including) |
| Container_monitoring_solution | Microsoft | - (including) | - (including) |
| Log_analytics_agent | Microsoft | - (including) | - (including) |
| System_center_operations_manager | Microsoft | - (including) | - (including) |
References
- http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
- http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38647