Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2021-42321
HistoryNov 17, 2021 - 12:00 a.m.

Microsoft Exchange Server Remote Code Execution Vulnerability

2021-11-1700:00:00
CISA
www.cisa.gov
10

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.965

Percentile

99.6%

JSON

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

Related

checkpoint_advisories 1
rapid7blog 1
cnvd 1
attackerkb 2
cve 1
cvelist 1
githubexploit 2
packetstorm 2
prion 1
zdt 2
mscve 1
nvd 1
thn 3
metasploit 1
nessus 2
kaspersky 1
mskb 1
avleonov 1
cisa 1
krebs 1
ics 1
kitploit 1
threatpost 1
hivepro 1
qualysblog 2
malwarebytes 1
googleprojectzero 1
checkpoint_advisories
checkpoint_advisories
Microsoft Exchange Server Remote Code Execution (CVE-2021-42321)
2021-11-23 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-02-25 21:48:46
cnvd
cnvd
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-90307)
2021-11-12 00:00:00
attackerkb
attackerkb
CVE-2021-42321
2021-11-10 00:00:00
CVE-2022-21969
2022-01-11 00:00:00
cve
cve
CVE-2021-42321
2021-11-10 01:19:50
cvelist
cvelist
CVE-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-10 00:47:43
githubexploit
githubexploit
Exploit for CVE-2021-42321
2022-10-08 13:00:23
Exploit for CVE-2021-42321
2021-11-23 02:26:26
packetstorm
packetstorm
Microsoft Exchange Server Remote Code Execution
2022-02-25 00:00:00
Microsoft Exchange Server ChainedSerializationBinder Remote Code Execution
2022-08-22 00:00:00
prion
prion
Remote code execution
2021-11-10 01:19:00
zdt
zdt
Microsoft Exchange Server Remote Code Execution Exploit
2022-02-26 00:00:00
Microsoft Exchange Server ChainedSerializationBinder Remote Code Execution Exploit
2022-08-22 00:00:00
mscve
mscve
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-09 08:00:00
nvd
nvd
CVE-2021-42321
2021-11-10 01:19:50
thn
thn
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape
2022-12-22 13:13:00
Microsoft Warns of Uptick in Hackers Leveraging Publicly-Disclosed 0-Day Vulnerabilities
2022-11-05 06:00:00
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
2021-11-10 06:24:00
metasploit
metasploit
Microsoft Exchange Server ChainedSerializationBinder RCE
2022-08-09 17:32:09
nessus
nessus
Security Updates for Exchange (November 2021)
2021-11-09 00:00:00
Security Updates for Exchange (November 2021) (Remote)
2021-12-09 00:00:00
kaspersky
kaspersky
KLA12342 Multiple vulnerabilities in Microsoft Server Software
2021-11-09 00:00:00
mskb
mskb
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: November 9, 2021 (KB5007409)
2021-11-09 08:00:00
avleonov
avleonov
Vulristics Command Line Interface, improved Product & Vuln. Type Detections and Microsoft Patch Tuesday November 2021
2021-11-30 20:30:48
cisa
cisa
CISA Adds Four Known Exploited Vulnerabilities to Catalog
2021-11-17 00:00:00
krebs
krebs
Microsoft Patch Tuesday, November 2021 Edition
2021-11-09 20:39:07
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
kitploit
kitploit
Heyserial - Programmatically Create Hunting Rules For Deserialization Exploitation With Multiple Keywords, Gadget Chains, Object Types, Encodings, And Rule Types
2022-05-12 21:30:00
threatpost
threatpost
Microsoft Nov. Patch Tuesday Fixes Six Zero-Days, 55 Bugs
2021-11-09 21:41:49
hivepro
hivepro
Microsoft’s Patch Tuesday Security Updates for November
2021-11-10 11:20:36
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities
2021-11-11 01:07:53
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
malwarebytes
malwarebytes
[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates
2021-11-10 14:30:23
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.965

Percentile

99.6%

JSON
Related for CISA-KEV-CVE-2021-42321
checkpoint_advisories1rapid7blog1cnvd1attackerkb2cve1cvelist1githubexploit2packetstorm2prion1zdt2mscve1nvd1thn3metasploit1nessus2kaspersky1mskb1avleonov1cisa1krebs1ics1kitploit1threatpost1hivepro1qualysblog2malwarebytes1googleprojectzero1