返回 CVE 浏览器

CVE-2021-38647

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score66.2790%

EPSS Percentile89.95th

Published2021-09-15

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Open Management Infrastructure Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦

Microsoft

Azure Automation State Configuration

All versions

📦

Microsoft

Azure Automation Update Management

All versions

📦

Microsoft

Azure Diagnostics \(lad\)

All versions

📦

Microsoft

Azure Open Management Infrastructure

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647

🔗 http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38647

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 29 日

本期威胁情报聚焦遭活跃利用的 Arista VeloCloud CVE-2026-16812、JetBrains TeamCity CVE-2026-63077 未经身份验证 RCE、公开 IPMI／BMC 的 RAKP 密码风险，以及 Origin Energy 与 MCBS 数据泄露更新。

每日全球网络威胁情报摘要｜2026 年 7 月 28 日

本期威胁情报聚焦 Certighost CVE-2026-54121 的 AD CS 域接管攻击链、vBulletin CVE-2026-61511 预身份认证 RCE、Dysphoria 僵尸网络扩张，以及 DentaQuest 与 Fairlife 数据泄露及勒索事件。

周度网络安全新闻：2026 年 7 月 27 日

本周重大安全周报聚焦于 Check Point SmartConsole CVE-2026-16232 验证绕过之在野利用、PAN-OS GlobalProtect 漏洞与 Qilin 勒索软件侵袭、俄罗斯 LAUNDRY BEAR 对 Zimbra 进行之国家级电子邮件间谍活动，以及 Windchill 与 FakeGit 恶意 Repositories 威胁趋势。

相关漏洞威胁

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-158314.3

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certa...

CVE-2026-143414.9

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-124368.4

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...