--- title: ACSC - Microsoft Azure Service - Critical Alert description: Remote code execution vulnerability present in Open Management Infrastructure, affects certain Microsoft Azure services image: https://blog.voiceplus.com.au/hubfs/ACSC.png --- [![header-logo-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/logo_header.png)](https://www.voiceplus.com.au/) - [Home](https://www.voiceplus.com.au/) - Solutions ENTERPRISE SERVICES [Integrated Managed Mobility & EndPoint Services](https://www.voiceplus.com.au/enterprise-services/integrated-managed-mobility-and-endpoint-services) [Telecom Expense Management & Optimisation](https://www.voiceplus.com.au/enterprise-services/telecom-expense-management-and-optimisation) [Device Lifecycle Management](https://www.voiceplus.com.au/enterprise-services/device-lifecycle-management) [Procurement & Support](https://www.voiceplus.com.au/enterprise-services/procurement-and-support) [Device Security & Application](https://www.voiceplus.com.au/enterprise-services/device-security-and-application) [Site, Branch & Site Connectivity](https://www.voiceplus.com.au/enterprise-services/site-branch-and-site-connectivity) ENTERPRISE OUTCOMES [Reduce Costs](https://www.voiceplus.com.au/solutions/reduce-costs) [Track Assets & Centralized Management](https://www.voiceplus.com.au/solutions/track-assets-and-centralized-management) [Security](https://www.voiceplus.com.au/solutions/security) - [About Us](https://www.voiceplus.com.au/about-us) - [Contact Us](https://www.voiceplus.com.au/contact-us) - [Blog](https://blog.voiceplus.com.au/en-au) - [Trust Centre](https://www.voiceplus.com.au/trust-centre) # ACSC - Microsoft Azure Service - Critical Alert ![underline-img](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/underline.png?width=212&height=3&name=underline.png) 27 September 2021 [![Share on linkedin](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/linkedin-color.png?width=24&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.voiceplus.com.au/en-au/acsc-microsoft-azure-service-critical-alert?utm_medium=social&utm_source=linkedin) [![Share on twitter](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://blog.voiceplus.com.au/en-au/acsc-microsoft-azure-service-critical-alert?utm_medium=social&utm_source=twitter&url=https://blog.voiceplus.com.au/en-au/acsc-microsoft-azure-service-critical-alert?utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on facebook](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/facebook-color.png?width=24&name=facebook-color.png)](http://www.facebook.com/share.php?u=https://blog.voiceplus.com.au/en-au/acsc-microsoft-azure-service-critical-alert?utm_medium=social&utm_source=facebook) A remote code execution vulnerability exists in Open Management Infrastructure, a management agent used in certain Linux-based Microsoft Azure services. Exploitation of this vulnerability could allow a malicious actor to take control of the vulnerable host. Affected organisations should apply the available security update. **Alert status: CRITICAL** ### **Background /What has happened?** [Open Management Infrastructure](https://github.com/Microsoft/omi) (OMI) is an open source software agent which can be used to perform remote management of hosts if it is installed via HTTP/HTTPS. OMI is deployed on certain Linux-based services within Microsoft Azure. If a vulnerable OMI deployment exposes a HTTP/HTTPS port it is susceptible to this remote code execution vulnerability. Microsoft has identified that most Azure services which utilise OMI do not expose a HTTP or HTTPS port. While this vulnerability may primarily affect Microsoft Azure customers, other organisations may have incorporated the use of OMI into their own infrastructure and may be vulnerable. ### **Mitigation / How do I stay secure?** A patch for OMI is available to mitigate this vulnerability. All Australian customers who utilise Microsoft Azure should review [Microsoft’s security advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647) for information on how to determine possible vulnerability as well as how to apply the security update. Organisations which have incorporated OMI into their own infrastructure should ensure they are utilising the latest version available from the [OMI GitHub page](https://github.com/Microsoft/omi). ### Assistance / Where can I go for help? The ACSC is monitoring the situation and is able to provide assistance and advice as required. Organisations that have been impacted or require assistance can contact the ACSC via **1300 CYBER1 (1300 292 371).** ## Latest from the Blog [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/ios27-blog-900x900.png?width=226&height=226&name=ios27-blog-900x900.png)](https://blog.voiceplus.com.au/en-au/ios-27-is-here-and-your-64gb-fleet-has-a-problem) [iOS 27 is here, and your 64GB Fleet has a problem ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/ios-27-is-here-and-your-64gb-fleet-has-a-problem) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus%20-%20Whiddon%20Scholarship%20Program%20blog%20banner%20%28600%20x%20900%20px%29%20%28800%20x%20900%20px%29%20%28850%20x%20900%20px%29%20%28900%20x%20900%20px%29.png?width=226&height=226&name=VoicePlus%20-%20Whiddon%20Scholarship%20Program%20blog%20banner%20%28600%20x%20900%20px%29%20%28800%20x%20900%20px%29%20%28850%20x%20900%20px%29%20%28900%20x%20900%20px%29.png)](https://blog.voiceplus.com.au/en-au/investing-in-the-people-who-care-for-others-voiceplus-and-the-whiddon-career-development-scholarship-program) [Investing in the people who care for others: VoicePlus and the Whiddon Career Development Scholarship Program ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/investing-in-the-people-who-care-for-others-voiceplus-and-the-whiddon-career-development-scholarship-program) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/featured-market-update.png?width=226&height=226&name=featured-market-update.png)](https://blog.voiceplus.com.au/en-au/satellite-to-mobile-in-australia-market-and-regulatory-update-august-2026) [Satellite-to-Mobile in Australia: Market and Regulatory Update — August 2026 ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/satellite-to-mobile-in-australia-market-and-regulatory-update-august-2026) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/featured-starlink-voice.png?width=226&height=226&name=featured-starlink-voice.png)](https://blog.voiceplus.com.au/en-au/starlink-voice-in-australia-what-s-actually-available-today-and-what-s-coming) [Starlink Voice in Australia: What's Actually Available Today (and What's Coming) ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/starlink-voice-in-australia-what-s-actually-available-today-and-what-s-coming) 3 Strategies to Reduce Telecom Cost [Here's How](https://landing.voiceplus.com.au/en-au/3-strategies-to-reduce-telecom-cost) ![footer-logoimg](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/footerlogo.png) VoicePlus is your independent managed mobility and endpoint specialist. We combine our experience and technology to secure cost savings and optimise productivity for clients seeking better business outcomes. The VoicePlus Companies acknowledges the Traditional owners of the lands on which we meet and work, both at our offices on Cammeraygal land and our locations across Australia. We pay our respects to Elders’ past, present and emerging and honour their living culture and custodianship. Solutions [Integrated Managed Mobility](https://www.voiceplus.com.au/services/managed-mobile-computer-services) [Telecom Expense Management](https://www.voiceplus.com.au/services/telecom-expense-management) [Device Lifecycle Management](https://www.voiceplus.com.au/services/device-lifecycle-management) [Procurement & Support](https://www.voiceplus.com.au/services/procurement-and-support) [Device Security & Application](https://www.voiceplus.com.au/services/device-security) [Site, Branch & Site Connectivity](https://www.voiceplus.com.au/services/managed-endpoint) ![seperator-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/seperator.png) [Reduce Cost](https://www.voiceplus.com.au/enterprise-outcomes/cost-optimisation) [Track Assets](https://www.voiceplus.com.au/enterprise-outcomes/cost-visibility) [Security](https://www.voiceplus.com.au/services/device-security) VoicePlus [Privacy Policy](https://www.voiceplus.com.au/policies/privacy-policy) [Modern Slavery](https://www.voiceplus.com.au/policies/modern-slavery-statement) [Contact Us](https://www.voiceplus.com.au/contact-us) [About Us](https://www.voiceplus.com.au/about-us) [Trust Centre](https://www.voiceplus.com.au/trust-centre) Find Us [+61 2 9334 5600](tel:+61%202%209334%205600) [customercare@voiceplus.com.au](mailto:customercare@voiceplus.com.au) [VoicePlus Head Office Suite 902, 275 Alfred Street North Sydney, NSW 2060 Australia](https://goo.gl/maps/kaky2AuyRWgHJicT9) [VoicePlus Branch Office Suite A, Floor 8, 152 Quay Street Auckland, AUK 1010 New Zealand](https://maps.app.goo.gl/78fGwdLFHfXHNN4h9) [![twitter-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/twitter.png)](https://x.com/VoicePlusData1) [![linkedin-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/linkedin.png)](https://www.linkedin.com/company/voiceplus-data) [![fb-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/fb.png)](https://www.facebook.com/VoicePlusData) ![VoicePlus is ISO/IEC 27001:2022 Certified](https://www.voiceplus.com.au/assets/footer-photos/ISO-Certified-1.png "VoicePlus is ISO/IEC 27001:2022 Certified") ![VoicePlus is ISO/IEC 27001:2022 Certified](https://www.voiceplus.com.au/assets/footer-photos/jas-anz-logo.gif "VoicePlus is ISO/IEC 27001:2022 Certified") --- Copyright © 2026. All Rights Reserved ![](https://blog.voiceplus.com.au/hubfs/raw_assets/public/Custom/page/VoicePlus_blog_2023_theme/icons8-settings-32.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Australian Cyber Security Centre", "url" : "https://blog.voiceplus.com.au/en-au/author/australian-cyber-security-centre" }, "dateModified" : "2023-09-11T11:56:10.896Z", "datePublished" : "2021-09-27T01:43:24.000Z", "headline" : "ACSC - Microsoft Azure Service - Critical Alert", "image" : [ "https://blog.voiceplus.com.au/hubfs/ACSC.png" ], "mainEntityOfPage" : { "@id" : "https://blog.voiceplus.com.au/en-au/acsc-microsoft-azure-service-critical-alert", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.voiceplus.com.au/hubfs/voiceplus_logo.png" }, "name" : "VoicePlus" } } ```