CVE-2022-33640 is an Elevation of Privilege vulnerability affecting Microsoft's Open Management Infrastructure (OMI) within System Center Operations Manager. This vulnerability carries a high CVSS score of 7.8, indicating that a local attacker with low privileges can achieve significant impact, including high confidentiality, integrity, and availability compromise, with low attack complexity. Despite its severity, there is no evidence of active exploitation, and public exploit code is currently unavailable, though community discussion and media coverage suggest some awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.6.10-2CPE matchmatch criteria | cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:system_center_operations_manager:2016:-:*:*:*:*:*:* | ||
2019CPE matchmatch criteria | cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.