Actively exploited in the wild
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft - Open Management Infrastructure (OMI) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-38649
HighCVSS 7.0KEVExploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Risk Assessment
Risk of privilege escalation and system security compromise.
Recommendation
Apply security updates for Open Management Infrastructure.
Other vulnerabilities in Open Management Infrastructure
See all- CVE-2021-38648HighActively exploited
An elevation of privilege vulnerability in Open Management Infrastructure (OMI).
- CVE-2021-38647CriticalActively exploited
Remote code execution vulnerability in Open Management Infrastructure (OMI). Allows a remote unauthenticated attacker to execute arbitrary code.
- CVE-2021-38645HighActively exploited
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Original NVD description (English source)
Open Management Infrastructure Elevation of Privilege Vulnerability