KEV · Actively exploited

CVE-2021-38647

CVE-2021-38647 is actively exploited (CISA KEV catalog) : critical severity (CVSS 9.8), 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): 9.8
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Public exploit : Nuclei Published on 2021-09-15

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Attack vector : Network No privileges required No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS 99.93% predictive model; CISA confirms active exploitation percentile 100.0%

CISA Known Exploited Vulnerability

Added to KEV: 2021-11-03
Remediation deadline: 2021-11-17
Required action: Apply updates per vendor instructions.
Ransomware: Yes, known ransomware campaign

View on NVD ↗ CISA KEV catalog ↗ Advisory · msrc.microsoft.com Advisory · portal.msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM