CVE-2024-21330

HIGH

Microsoft Azure Automation < 1.8.1-0 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 37.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-122 CWE-787
Status published
Products (9)
microsoft/azure_automation
microsoft/azure_automation_update_management
microsoft/azure_security_center
microsoft/azure_sentinel
microsoft/container_monitoring_solution
microsoft/log_analytics_agent
microsoft/operations_management_suite_agent_for_linux < 1.8.1-0
microsoft/system_center_operations_manager 2019
microsoft/system_center_operations_manager 2022
Published Mar 12, 2024
Tracked Since Feb 18, 2026