Open Management Infrastructure Remote Code Execution Vulnerability
Open Management Infrastructure Remote Code Execution Vulnerability
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Open Management Infrastructure | 16.0 |
| Microsoft | System Center Operations Manager (SCOM) | 1.0.0 |
| Microsoft | Azure Automation State Configuration, DSC Extension | 2.0.0 |
| Microsoft | Azure Automation Update Management | 1.0.0 |
| Microsoft | Log Analytics Agent | 1.0.0 |
| Microsoft | Azure Diagnostics (LAD) | 3.0.0 |
| Microsoft | Container Monitoring Solution | 1.0.0 |
| Microsoft | Azure Security Center | 1.0.0 |
| Microsoft | Azure Sentinel | 1.0.0 |
| Microsoft | Azure Stack Hub | 1.0.0, 1.0.0 |
Yes — actively exploited. Added to the CISA KEV catalog on 2021-11-03. Ransomware use: Known.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.