Understanding the impact of OMIGOD (CVE-2021-38647)

Censys details a critical vulnerability in Microsoft OMI (CVE-2021-38647) that allows unauthenticated remote command execution as root. The report includes proof-of-concept exploit demonstrations, a Docker-based vulnerable environment for testing, guidance on reliable scanning (Content-Type header requirement), evidence of mass scanning, and identification of 101 internet-exposed hosts; immediate patching is recommended.