CVE Vulnerability Advisory Database

[Affected Scope] Linux virtual machines and Azure service environments running Microsoft Open Management Infrastructure (OMI) versions prior to v1.6.8-1

[Impact] A local attacker with low-privileged access can elevate privileges to root, gaining full control over the target system and executing arbitrary code

[Mitigation] Immediately update the OMI package to the latest version (v1.6.8-1 or higher) and verify the auto-update status of associated Azure agents

[Affected Scope] Microsoft Open Management Infrastructure (OMI) versions prior to 1.6.8-1, commonly deployed in Azure Linux environments

[Impact] Remote or local attackers can bypass authentication to execute arbitrary commands with root privileges, leading to full system compromise

[Mitigation] Immediately upgrade OMI to version 1.6.8-1 or higher, and restrict access to OMI ports (5985, 5986)

[Affected Scope] Open Management Infrastructure (OMI) versions prior to 1.6.8-1, commonly deployed automatically on Microsoft Azure Linux Virtual Machines

[Impact] Unauthenticated remote attackers can execute arbitrary commands with root privileges on the target system by sending a specially crafted HTTP/S request

[Mitigation] Immediately upgrade the OMI package to version 1.6.8-1 or higher, and restrict network access to OMI ports (5985, 5986) using firewalls

[Affected Scope] Microsoft Open Management Infrastructure (OMI) versions prior to 1.6.8-1, commonly deployed in Azure Linux environments

[Impact] Local unprivileged attackers can execute arbitrary commands with root privileges, leading to full system compromise

[Mitigation] Immediately upgrade OMI to version 1.6.8-1 or higher, and restrict access to OMI-related ports