Actively exploited in the wild
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft - Open Management Infrastructure (OMI) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-38645
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Risk Assessment
Risk of privilege escalation and system security compromise.
Recommendation
Apply security updates for Open Management Infrastructure.
Other vulnerabilities in Open Management Infrastructure
See all- CVE-2021-38649HighActively exploited
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
- CVE-2021-38648HighActively exploited
An elevation of privilege vulnerability in Open Management Infrastructure (OMI).
- CVE-2021-38647CriticalActively exploited
Remote code execution vulnerability in Open Management Infrastructure (OMI). Allows a remote unauthenticated attacker to execute arbitrary code.
Original NVD description (English source)
Open Management Infrastructure Elevation of Privilege Vulnerability