Back to the CVE list
CVE-2021-38647 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS score

9.8

EPSS probability

%99.9

Risk score

19.6

Published

5 y ago

OverviewPublic Exploits (10)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
corelight/CVE-2021-38647-noimages
GitHub

corelight/CVE-2021-38647-noimages

Public PoCSource updated: 13.03.2024 20:05:25
G
Vulnmachines/OMIGOD_cve-2021-38647
GitHub

CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root.

Public PoCSource updated: 12.08.2024 20:16:41
G
corelight/CVE-2021-38647
GitHub

CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI

Public PoCSource updated: 12.08.2024 20:16:27
G
goofsec/omigod
GitHub

Quick and dirty CVE-2021-38647 (Omigod) exploit written in Go.

Public PoCSource updated: 05.07.2023 11:05:54
G
AlteredSecurity/CVE-2021-38647
GitHub

CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD

Public PoCSource updated: 24.08.2026 14:51:53
G
abousteif/cve-2021-38647
GitHub

https://github.com/corelight/CVE-2021-38647 without the bloat

Public PoCSource updated: 22.09.2021 15:29:15
G
SimenBai/CVE-2021-38647-POC-and-Demo-environment
GitHub

OMIGod / CVE-2021-38647 POC and Demo environment

Public PoCSource updated: 26.10.2024 16:29:51
G
Immersive-Labs-Sec/cve-2021-38647
GitHub

A PoC exploit for CVE-2021-38647 RCE in OMI

Public PoCSource updated: 05.05.2023 16:11:59
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38647.yaml
Nuclei

Nuclei: Microsoft Open Management Infrastructure - Remote Code Execution

Exploit reference
N
http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
NVD reference

http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-38647"