← KEV catalog
CISA known exploited vulnerability

CVE-2021-38648

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Open Management Infrastructure (OMI)

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-38648

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?