Read the docs
TI-2022-11694 Aliases CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Priority LOW 36Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Why it matters now

EPSS 0.00951 61st percentileScored 2026-11-07
Fix Fixed Azure Automation State Configuration, DSC Extension (Microsoft): DSC Agent versions: 2.71.1.33, 3.0.0.7Azure Automation Update Management (Microsoft): OMS Agent for Linux GA v1.14.13+10 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftAzure Automation State Configuration, DSC Extension2.0.0 to before DSC Agent versions: 2.71.1.33, 3.0.0.7DSC Agent versions: 2.71.1.33, 3.0.0.7Patch availableCNA
MicrosoftAzure Automation Update Management1.0.0 to before OMS Agent for Linux GA v1.14.13OMS Agent for Linux GA v1.14.13Patch availableCNA
MicrosoftLog Analytics Agent1.0.0 to before OMS Agent for Linux GA v1.14.13OMS Agent for Linux GA v1.14.13Patch availableCNA
MicrosoftAzure Diagnostics (LAD)3.0.0 to before LAD v4.0.27 and LAD v3.0.137LAD v4.0.27 and LAD v3.0.137Patch availableCNA
MicrosoftContainer Monitoring Solution1.0.0 to before publicationpublicationPatch availableCNA
MicrosoftAzure Security Center1.0.0 to before OMS Agent for Linux GA v1.14.13OMS Agent for Linux GA v1.14.13Patch availableCNA
MicrosoftAzure Sentinel1.0.0 to before OMS Agent for Linux GA v1.14.13OMS Agent for Linux GA v1.14.13Patch availableCNA
MicrosoftAzure Stack Hub1.0.0 to before OMS Agent for Linux GA v1.14.13OMS Agent for Linux GA v1.14.13Patch availableCNA
MicrosoftOpen Management Infrastructure16.0 to before OMI Version 1.6.9-1OMI Version 1.6.9-1Patch availableCNA
MicrosoftSystem Center Operations Manager (SCOM) 202210.22.0 to before 10.22.1024.010.22.1024.0Patch availableCNA
MicrosoftSystem Center Operations Manager (SCOM) 201910.19.0 to before 10.19.1152.010.19.1152.0Patch availableCNA
MicrosoftSystem Center Operations Manager (SCOM) 20167.6.0 to before 7.6.1108.07.6.1108.0Patch availableCNA
  • Azure Automation State Configuration, DSC Extension VendorMicrosoft Affected 2.0.0 to before DSC Agent versions: 2.71.1.33, 3.0.0.7 Fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7 Patch available CNA
  • Azure Automation Update Management VendorMicrosoft Affected 1.0.0 to before OMS Agent for Linux GA v1.14.13 Fixed in OMS Agent for Linux GA v1.14.13 Patch available CNA
  • Log Analytics Agent VendorMicrosoft Affected 1.0.0 to before OMS Agent for Linux GA v1.14.13 Fixed in OMS Agent for Linux GA v1.14.13 Patch available CNA
  • Azure Diagnostics (LAD) VendorMicrosoft Affected 3.0.0 to before LAD v4.0.27 and LAD v3.0.137 Fixed in LAD v4.0.27 and LAD v3.0.137 Patch available CNA
  • Container Monitoring Solution VendorMicrosoft Affected 1.0.0 to before publication Fixed in publication Patch available CNA
  • Azure Security Center VendorMicrosoft Affected 1.0.0 to before OMS Agent for Linux GA v1.14.13 Fixed in OMS Agent for Linux GA v1.14.13 Patch available CNA
  • Azure Sentinel VendorMicrosoft Affected 1.0.0 to before OMS Agent for Linux GA v1.14.13 Fixed in OMS Agent for Linux GA v1.14.13 Patch available CNA
  • Azure Stack Hub VendorMicrosoft Affected 1.0.0 to before OMS Agent for Linux GA v1.14.13 Fixed in OMS Agent for Linux GA v1.14.13 Patch available CNA
  • Open Management Infrastructure VendorMicrosoft Affected 16.0 to before OMI Version 1.6.9-1 Fixed in OMI Version 1.6.9-1 Patch available CNA
  • System Center Operations Manager (SCOM) 2022 VendorMicrosoft Affected 10.22.0 to before 10.22.1024.0 Fixed in 10.22.1024.0 Patch available CNA
  • System Center Operations Manager (SCOM) 2019 VendorMicrosoft Affected 10.19.0 to before 10.19.1152.0 Fixed in 10.19.1152.0 Patch available CNA
  • System Center Operations Manager (SCOM) 2016 VendorMicrosoft Affected 7.6.0 to before 7.6.1108.0 Fixed in 7.6.1108.0 Patch available CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:azure_automation_state_configuration:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:a:microsoft:azure_automation_update_management:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:a:microsoft:azure_diagnostics:*:*:*:*:*:*:*:*3.0 to before 3.0.137; 4.0 to before 4.0.27VulnerableMicrosoft
cpe:2.3:a:microsoft:azure_security_center:*:*:*:*:*:*:*:*before 1.14.13VulnerableMicrosoft
cpe:2.3:a:microsoft:azure_sentinel:*:*:*:*:*:*:*:*before 1.14.13VulnerableMicrosoft
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*before 1.14.13VulnerableMicrosoft
cpe:2.3:a:microsoft:container_monitoring_solution:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:a:microsoft:log_analytics_agent:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:*before 1.6.9-1VulnerableMicrosoft
cpe:2.3:a:microsoft:system_center_operations_manager:2016:-:*:*:*:*:*:*2016VulnerableMicrosoft
  • cpe:2.3:a:microsoft:azure_automation_state_configuration:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:azure_automation_update_management:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:azure_diagnostics:*:*:*:*:*:*:*:* Versions 3.0 to before 3.0.137; 4.0 to before 4.0.27 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:azure_security_center:*:*:*:*:*:*:*:* Versions before 1.14.13 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:azure_sentinel:*:*:*:*:*:*:*:* Versions before 1.14.13 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:* Versions before 1.14.13 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:container_monitoring_solution:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:log_analytics_agent:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:* Versions before 1.6.9-1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:system_center_operations_manager:2016:-:*:*:*:*:*:* Versions 2016 Vulnerable ·Microsoft
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*2019VulnerableMicrosoft
cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*2022VulnerableMicrosoft
  • cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:* Versions 2019 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:* Versions 2022 Vulnerable ·Microsoft

Remediation

  • Fix · CNA Azure Automation State Configuration, DSC Extension (Microsoft) Fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7
  • Fix · CNA Azure Automation Update Management (Microsoft) Fixed in OMS Agent for Linux GA v1.14.13
  • Fix · CNA Log Analytics Agent (Microsoft) Fixed in OMS Agent for Linux GA v1.14.13
  • Fix · CNA Azure Diagnostics (LAD) (Microsoft) Fixed in LAD v4.0.27 and LAD v3.0.137
  • Fix · CNA Container Monitoring Solution (Microsoft) Fixed in publication
  • Fix · CNA Azure Security Center (Microsoft) Fixed in OMS Agent for Linux GA v1.14.13
  • Fix · CNA Azure Sentinel (Microsoft) Fixed in OMS Agent for Linux GA v1.14.13
  • Fix · CNA Azure Stack Hub (Microsoft) Fixed in OMS Agent for Linux GA v1.14.13
  • Fix · CNA Open Management Infrastructure (Microsoft) Fixed in OMI Version 1.6.9-1
  • Fix · CNA System Center Operations Manager (SCOM) 2022 (Microsoft) Fixed in 10.22.1024.0
  • Fix · CNA System Center Operations Manager (SCOM) 2019 (Microsoft) Fixed in 10.19.1152.0
  • Fix · CNA System Center Operations Manager (SCOM) 2016 (Microsoft) Fixed in 7.6.1108.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-29149

References

Patch 1

Advisory 1

  • TI-2021-16224 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-16226 Open Management Infrastructure Elevation of Privilege Vulnerability KEVCVSS 3.1HIGH 7.8
  • TI-2021-16225 Open Management Infrastructure Elevation of Privilege Vulnerability KEVCVSS 3.1HIGH 7.8
  • TI-2021-16222 Open Management Infrastructure Elevation of Privilege Vulnerability KEVCVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences