← KEV catalog
CISA known exploited vulnerability

CVE-2021-38649

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Open Management Infrastructure (OMI)

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-38649

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?