CVE-2020-17083

🗓️ 11 Nov 2020 06:48:31Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 124 Views🌐 WEB

Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-1708

Reporter	Title	Published	Views	Family All 19
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Exchange Server arises from the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.	19 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-17083	27 May 202212:53	–	circl
CNVD	Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-28802)	11 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-17083 Microsoft Exchange Server Remote Code Execution Vulnerability	11 Nov 202006:48	–	cvelist
Microsoft KB	Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: November 10, 2020	10 Nov 202008:00	–	mskb
Kaspersky	KLA12000 Multiple vulnerabilities in Microsoft Exchange Server	10 Nov 202000:00	–	kaspersky
Microsoft CVE	Microsoft Exchange Server Remote Code Execution Vulnerability	10 Nov 202008:00	–	mscve
Microsoft CVE	Microsoft Exchange Server Remote Code Execution Vulnerability	2 Mar 202108:00	–	mscve
Microsoft CVE	Microsoft Exchange Server Remote Code Execution Vulnerability	2 Mar 202108:00	–	mscve

NVD

Vulners

Node

microsoft exchange_serverMatch2013cumulative_update_23

microsoft exchange_serverMatch2016cumulative_update_17

microsoft exchange_serverMatch2016cumulative_update_18

microsoft exchange_serverMatch2019cumulative_update_6

microsoft exchange_serverMatch2019cumulative_update_7

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.00.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17083

Parameter	Position	Path	Description	CWE
destination	body	owa/auth.owa	Web-accessible Exchange endpoints used in the PoC for initial authenticated session and subsequent file write exploit.	CWE-79
flags	body	owa/auth.owa	Web-accessible Exchange endpoints used in the PoC for initial authenticated session and subsequent file write exploit.	CWE-79
username	body	owa/auth.owa	Web-accessible Exchange endpoints used in the PoC for initial authenticated session and subsequent file write exploit.	CWE-79
password	body	owa/auth.owa	Web-accessible Exchange endpoints used in the PoC for initial authenticated session and subsequent file write exploit.	CWE-79
Thumbprint	path	ecp/4VFQwc7W.aspx	Aspx file path created by the exploit for remote code execution via Exchange web services.	CWE-79
BinaryEncoded	path	ecp/4VFQwc7W.aspx	Aspx file path created by the exploit for remote code execution via Exchange web services.	CWE-79
FileName	path	ecp/4VFQwc7W.aspx	Aspx file path created by the exploit for remote code execution via Exchange web services.	CWE-79
GET	path	ecp/{aspx}.aspx	Dynamic aspx web shell deployed by the PoC to execute commands on the target.	CWE-79
C:/Windows/Temp/hta.hta	path	ecp/{aspx}.aspx	Dynamic aspx web shell deployed by the PoC to execute commands on the target.	CWE-79

17 Jun 2026 02:58Current

6.3Medium risk

Vulners AI Score6.3

CVSS 23.5

CVSS 3.15.4 - 5.5

EPSS0.11981

CWE-79