Advisories · Technology

Microsoft Azure Automation State Configuration, DSC Extension.

Every CVE that names Microsoft Azure Automation State Configuration, DSC Extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-29149 CVE record

CVSS 7.8 High

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Jun 2022
CVE-2021-38649 CVE record

CVSS 7.0 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38648 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38647 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38645 CVE record

CVSS 7.8 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021