Lucene search
CISACISA-KEV-CVE-2021-34523HistoryNov 03, 2021 - 12:00 a.m.
Microsoft Exchange Server Privilege Escalation Vulnerability
2021-11-0300:00:00
CISA
www.cisa.gov
12
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS
0.859
Percentile
98.6%
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Related
attackerkb
attackerkb
CVE-2021-34523
2021-07-14 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
cve
cve
CVE-2021-34523
2021-07-14 18:15:12
threatpost
threatpost
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
2021-09-09 14:30:56
IKEA Hit by Email Reply-Chain Cyberattack
2021-11-29 21:22:12
‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks
2021-11-03 18:16:37
zdi
zdi
mscve
mscve
Microsoft Exchange Server Elevation of Privilege Vulnerability
2021-07-13 07:00:00
prion
prion
Privilege escalation
2021-07-14 18:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-34523
2021-07-14 18:15:12
checkpoint_advisories
checkpoint_advisories
malwarebytes
malwarebytes
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
msrc
msrc
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
Metasploit Wrap-Up
2021-08-20 19:12:00
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
hivepro
hivepro
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
mmpc
mmpc
The five-day job: A BlackByte ransomware intrusion case study
2023-07-06 17:00:00
kaspersky
kaspersky
KLA12224 Multiple vulnerabilities in Microsoft Exchange Server
2021-07-13 00:00:00
mskb
mskb
nessus
nessus
Security Updates for Microsoft Exchange Server (April 2021)
2021-04-13 00:00:00
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
avleonov
avleonov
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS
0.859
Percentile
98.6%
Related for CISA-KEV-CVE-2021-34523