MS.Azure.OMI.CVE-2024-21330.Out.of.Bounds.Write

Description

This indicates an attack attempt to exploit an Out-of-Bounds Write Vulnerability in Microsoft Azure Open Management Infrastructure (OMI).
The vulnerability is due to insufficient handling of crafted requests. Attackers can exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in the execution of arbitrary code under the security context of the system.

Affected Products

Microsoft System Center Operations Manager (SCOM) 2019
Microsoft System Center Operations Manager (SCOM) 2022
Microsoft Open Management Infrastructure
Microsoft Operations Management Suite Agent for Linux (OMS)

Impact

System Compromise: Attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330

References