Every CVE Search/ Get API key

CVE-2021-38647

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

9.8 CriticalIn KEVPublic exploit

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

99.9%Up 99.0 points since Sep 16, 2021
90%50%10%1%

What each source reports

CVE List Score used 9.8

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Record
CVE-2021-38647
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
EUVDEUVD-2021-25086 9.8

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Record
EUVD-2021-25086
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-rp2g-5hw2-q565 9.8

Open Management Infrastructure Remote Code Execution Vulnerability

Open Management Infrastructure Remote Code Execution Vulnerability

Record
GHSA-rp2g-5hw2-q565
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-287, CWE-665
Updated
2026-11-02
CISA KEV No score

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Record
CVE-2021-38647
Weakness
CWE-1390
Updated
2026-11-02
NVD 9.8

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Record
CVE-2021-38647
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV 9.8

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Record
CVE-2021-38647
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Show 2 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitMicrosoft OMI Management Interface Authentication Bypass2021-09-14
MetasploitMicrosoft OMI Management Interface Authentication Bypass2021-09-14
PoC in GitHubcorelight/CVE-2021-386472021-09-15
PoC in GitHubmidoxnet/CVE-2021-386472021-09-15
PoC in GitHubImmersive-Labs-Sec/cve-2021-386472021-09-16
PoC in GitHubhorizon3ai/CVE-2021-386472021-09-16
PoC in GitHubmarcosimioni/omigood2021-09-16
PoC in GitHubcraig-m-unsw/omigod-lab2021-09-18
PoC in GitHubSimenBai/CVE-2021-38647-POC-and-Demo-environment2021-09-19
PoC in GitHubAlteredSecurity/CVE-2021-386472021-09-20
Show 5 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubabousteif/cve-2021-386472021-09-22
PoC in GitHubVulnmachines/OMIGOD_cve-2021-386472021-09-24
PoC in GitHubgoofsec/omigod2021-09-26
PoC in GitHubcorelight/CVE-2021-38647-noimages2024-03-13
NucleiMicrosoft Open Management Infrastructure - Remote Code Execution

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-38647 is a critical vulnerability (CVSS 9.8) in Microsoft Open Management Infrastructure, published September 15, 2021. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.9%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open