MSRC-CVE-2024-21334 — Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
A remote unauthenticated attacker could access the OMI instance from the Internet and send specially crafted requests to trigger a use-after-free vulnerability.

Is there any action customers need to take to protect themselves against this vulnerability?
Customers running affected versions of SCOM (System Center Operations Manager) should update to OMI version 1.8.1-0.

Security updates
10.19.1253.0 — https://www.microsoft.com/en-us/download/details.aspx?id=58208
10.22.1070.0 — https://www.microsoft.com/en-in/download/details.aspx?id=104213
OMI version 1.8.1-0 — https://github.com/microsoft/omi

Vulnerabilities 1

Critical 9.8

CVE-2024-21334 EPSS 20%

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft Open Management Infrastructure System Center Operations Manager (SCOM) 2019 System Center Operations Manager (SCOM) 2022

Mar 12, 2024

Revision history

2024-03-12 #1
Information published.

References

CVE-2024-21334 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21334
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss