First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-21334

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	System Center Operations Manager (SCOM) 2019	>= 10.19.0, < 10.19.1253.0
Microsoft	System Center Operations Manager (SCOM) 2022	>= 10.22.0, < 10.22.1070.0
Microsoft	Open Management Infrastructure	>= 16.0, < OMI version 1.8.1-0

References

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-213358.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-213362.5Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2024-213375.2Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2024-213387.8Windows Kernel Elevation of Privilege Vulnerability CVE-2024-213396.4Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-21346.5A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknow CVE-2024-213404.6Windows Kernel Information Disclosure Vulnerability CVE-2024-213416.8Windows Kernel Remote Code Execution Vulnerability CVE-2024-213427.5Windows DNS Client Denial of Service Vulnerability CVE-2024-213437.5Windows Network Address Translation (NAT) Denial of Service Vulnerability CVE-2024-213445.9Windows Network Address Translation (NAT) Denial of Service Vulnerability CVE-2024-213458.8Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21334: Critical severity, CVSS 9.8 | Vulnix