Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:67DD67D3-33BC-455C-98A3-7DD0E1D4613D
HistoryDec 10, 2020 - 12:00 a.m.

CVE-2020-17132

2020-12-1000:00:00
attackerkb.com
53

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

JSON

Aka ‘Microsoft Exchange Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2020-17117, CVE-2020-17141, CVE-2020-17142, CVE-2020-17144.

Recent assessments:

zeroSteiner at January 12, 2021 7:07pm UTC reported:

This is vulnerability is a bypass for the patch issued for CVE-2020-16875. The vulnerability was also identified and analyzed by Steven Seeley. The patch can be bypassed using call operators as described in Seeley’s blog Making Clouds Rain RCE in Office 365.

The original vulnerability is a command injection vulnerability that results in OS commands being executed with SYSTEM level privileges on the Exchange server due to insufficient sanitization on a cmdlet invocation.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 4

Related

attackerkb 5
kaspersky 3
nessus 4
mskb 9
srcincite 4
qualysblog 9
thn 10
rapid7blog 7
threatpost 38
hivepro 1
ics 8
prion 7
cve 7
krebs 4
mscve 11
checkpoint_advisories 4
githubexploit 10
cisa_kev 2
metasploit 3
zdt 4
packetstorm 4
securelist 4
cisa 1
exploitpack 1
canvas 1
mssecure 2
trendmicroblog 1
zdi 1
taosecurity 1
exploitdb 2
avleonov 5
0daydb 1
malwarebytes 1
googleprojectzero 1
talosblog 1
attackerkb
attackerkb
CVE-2020-17144
2020-12-10 00:00:00
CVE-2020-16875
2020-09-11 00:00:00
CVE-2021-24085
2021-02-25 00:00:00
kaspersky
kaspersky
KLA12022 Multiple vulnerabilities in Microsoft Exchange Server
2020-12-08 00:00:00
KLA11955 RCE vulnerability in Microsoft Exchange Server
2020-09-08 00:00:00
KLA11664 Multiple vulnerabilities in Microsoft Exchange Server
2020-02-11 00:00:00
nessus
nessus
Security Updates for Microsoft Exchange Server (December 2020)
2020-12-08 00:00:00
Security Update for Microsoft Exchange Server 2010 SP 3 (December 2020)
2020-12-08 00:00:00
Security Updates for Exchange (September 2020)
2020-09-08 00:00:00
mskb
mskb
Description of the security update for Microsoft Exchange Server 2019 and 2016: December 8, 2020
2020-12-08 08:00:00
Description of the security update for Microsoft Exchange Server 2013: December 8, 2020
2020-12-08 08:00:00
Description of the security update for Microsoft Exchange Server 2010 Service Pack 3: December 8, 2020
2020-12-08 08:00:00
srcincite
srcincite
SRC-2020-0033 : Microsoft Exchange Server ImportTransportRuleCollection ProcessE15Format Remote Code Execution Vulnerability
2020-12-05 00:00:00
SRC-2020-0032 : Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability (patch bypass)
2020-10-02 00:00:00
SRC-2020-0031 : Microsoft Exchange Server EWS RouteComplaint ParseComplaintData XML External Entity Processing Information Disclosure Vulnerability
2020-04-23 00:00:00
qualysblog
qualysblog
December 2020 Patch Tuesday – 58 Vulnerabilities, 9 Critical, Windows Exchange, Hyper-V, SharePoint, Adobe
2020-12-08 20:26:44
February 2020 Patch Tuesday – 99 Vulns, 12 Critical, Patch for IE 0-Day, Exchange Vuln, Adobe Vulns
2020-02-11 19:47:15
Qualys Security Advisory: SolarWinds / FireEye
2020-12-22 21:17:31
thn
thn
NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
2021-07-02 06:23:00
U.S. Says Russian Hackers Stealing Sensitive Data from Defense Contractors
2022-02-17 05:42:00
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape
2022-12-22 13:13:00
rapid7blog
rapid7blog
Staying Secure in a Global Cyber Conflict
2022-02-25 01:31:27
Metasploit Wrap-Up
2021-02-12 19:26:37
Microsoft Exchange 2010 End of Support and Overall Patching Study
2020-09-29 16:05:16
threatpost
threatpost
Kubernetes Used in Brute-Force Attacks Tied to Russia’s APT28
2021-07-02 16:14:14
Microsoft Wraps Up a Lighter Patch Tuesday for the Holidays
2020-12-08 20:23:30
Facial Recognition 'Consent’ Doesn’t Exist, Threatpost Poll Finds
2019-04-26 12:10:15
hivepro
hivepro
Russian state-sponsored cyber actors targeting U.S. critical infrastructure
2022-02-18 12:20:35
ics
ics
Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology
2022-02-16 12:00:00
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
2022-02-24 12:00:00
Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity
2020-10-24 12:00:00
prion
prion
Remote code execution
2020-12-10 00:15:00
Remote code execution
2020-12-10 00:15:00
Remote code execution
2020-12-10 00:15:00
cve
cve
CVE-2020-17117
2020-12-10 00:15:00
CVE-2020-17142
2020-12-10 00:15:00
CVE-2020-17132
2020-12-10 00:15:00
krebs
krebs
Microsoft Patch Tuesday, Sept. 2020 Edition
2020-09-08 21:33:26
Microsoft Patch Tuesday, March 2020 Edition
2020-03-10 23:44:29
Patch Tuesday, November 2020 Edition
2020-11-11 01:56:41
mscve
mscve
Microsoft Exchange Remote Code Execution Vulnerability
2020-12-08 08:00:00
Microsoft Exchange Remote Code Execution Vulnerability
2020-12-08 08:00:00
Microsoft Exchange Remote Code Execution Vulnerability
2020-12-08 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Exchange Memory Corruption (CVE-2020-17144)
2020-12-08 00:00:00
Microsoft Exchange Remote Code Execution (CVE-2020-17132)
2022-10-31 00:00:00
Microsoft Exchange Memory Corruption (CVE-2020-16875)
2020-09-21 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Microsoft
2020-12-09 20:57:16
Exploit for Deserialization of Untrusted Data in Microsoft
2020-12-09 10:30:16
Exploit for Improper Authentication in Microsoft
2020-06-12 08:28:35
cisa_kev
cisa_kev
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-03 00:00:00
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
2021-11-03 00:00:00
metasploit
metasploit
Microsoft Exchange Server DlpUtils AddTenantDlpPolicy RCE
2020-09-16 07:41:08
Exchange Control Panel ViewState Deserialization
2020-02-28 02:57:08
Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability
2020-06-10 16:02:49
zdt
zdt
Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Exploit
2020-09-17 00:00:00
Exchange Control Panel Viewstate Deserialization Exploit
2020-03-05 00:00:00
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution Exploit
2020-03-02 00:00:00
packetstorm
packetstorm
Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution
2020-09-17 00:00:00
Exchange Control Panel Viewstate Deserialization
2020-03-04 00:00:00
Microsoft Exchange 2019 15.2.221.12 Remote Code Execution
2020-03-02 00:00:00
securelist
securelist
GReAT Ideas follow-up
2020-07-15 10:00:13
Owowa: the add-on that turns your OWA into a credential stealer and remote access panel
2021-12-14 10:00:39
APT trends report Q2 2020
2020-07-29 10:00:09
cisa
cisa
Unpatched Microsoft Exchange Servers Vulnerable to CVE-2020-0688
2020-03-10 00:00:00
exploitpack
exploitpack
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
2020-03-02 00:00:00
canvas
canvas
Immunity Canvas: OWA_RCE
2020-02-11 22:15:00
mssecure
mssecure
Defending Exchange servers under attack
2020-06-24 16:00:40
Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk
2020-04-28 16:00:49
trendmicroblog
trendmicroblog
This Week in Security News: Exploring Common Threats to Cloud Security and Zoom Removes Meeting IDs from App Title Bar to Improve Privacy
2020-04-10 12:46:43
zdi
zdi
Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability
2020-02-20 00:00:00
taosecurity
taosecurity
If You Can't Patch Your Email Server, You Should Not Be Running It
2020-04-07 15:28:00
exploitdb
exploitdb
Exchange Control Panel - Viewstate Deserialization (Metasploit)
2020-03-05 00:00:00
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
2020-03-02 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday February 2020
2020-02-13 14:50:34
Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020
2021-01-11 01:50:44
Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies
2020-03-22 01:15:34
0daydb
0daydb
Background Intelligent Transfer Service CVE-2020-0787 - Privilege Escalation
2020-06-12 13:15:16
malwarebytes
malwarebytes
Threat profile: Egregor ransomware is making a name for itself
2020-12-15 13:58:58
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage
2020-02-13 08:22:46

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

JSON
Related for AKB:67DD67D3-33BC-455C-98A3-7DD0E1D4613D
attackerkb5kaspersky3nessus4mskb9srcincite4qualysblog9thn10rapid7blog7threatpost38hivepro1ics8prion7cve7krebs4mscve11checkpoint_advisories4githubexploit10cisa_kev2metasploit3zdt4packetstorm4securelist4cisa1exploitpack1canvas1mssecure2trendmicroblog1zdi1taosecurity1exploitdb2avleonov50daydb1malwarebytes1googleprojectzero1talosblog1