Advisories · Technology

Microsoft Azure Diagnostics (LAD).

Every CVE that names Microsoft Azure Diagnostics (LAD) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-29149 CVE record

CVSS 7.8 High

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Jun 2022
CVE-2021-38649 CVE record

CVSS 7.0 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38648 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38647 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38645 CVE record

CVSS 7.8 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021