← KEV catalog
CISA known exploited vulnerability

CVE-2021-38645

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Open Management Infrastructure (OMI)

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-38645

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?