CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2021-38647

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score66.2790%
EPSS Percentile89.95th
Published2021-09-15
Last Modified2025-10-30
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Open Management Infrastructure Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦
Microsoft

Azure Automation State Configuration

All versions
📦
Microsoft

Azure Automation Update Management

All versions
📦
Microsoft

Azure Diagnostics \(lad\)

All versions
📦
Microsoft

Azure Open Management Infrastructure

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
🔗 http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38647

相關資安分析文章

每日全球網絡威脅情報摘要｜2026 年 7 月 29 日

本期威脅情報聚焦遭主動利用的 Arista VeloCloud CVE-2026-16812、JetBrains TeamCity CVE-2026-63077 未驗證 RCE、公開 IPMI／BMC 的 RAKP 密碼風險，以及 Origin Energy 與 MCBS 資料外洩更新。

2026-07-29

每日全球網絡威脅情報摘要｜2026 年 7 月 28 日

本期威脅情報聚焦 Certighost CVE-2026-54121 的 AD CS 網域接管攻擊鏈、vBulletin CVE-2026-61511 預先驗證 RCE、Dysphoria 殭屍網絡擴張，以及 DentaQuest 與 Fairlife 資料外洩及勒索事件。

2026-07-28

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

2026-07-27

相關漏洞威脅

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-158314.3

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certa...

CVE-2026-143414.9

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-124368.4

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...