CVE-2021-31206

🗓️ 14 Jul 2021 17:53:13Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 600 Views

Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-3120

Reporter	Title	Published	Views	Family All 28
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics
ATTACKERKB	CVE-2021-31206	14 Jul 202100:00	–	attackerkb
Information Security Automation	Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs	31 Aug 202123:16	–	avleonov
Information Security Automation	Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V	14 Jul 202121:00	–	avleonov
Circl	CVE-2021-31206	15 Jul 202110:13	–	circl
CNNVD	Microsoft Exchange Server 代码注入漏洞	13 Jul 202100:00	–	cnnvd
CNVD	Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-51483)	15 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-31206 Microsoft Exchange Server Remote Code Execution Vulnerability	14 Jul 202117:53	–	cvelist
EUVD	EUVD-2021-18119	7 Oct 202500:30	–	euvd
Hive Pro Threat Advisories	AvosLocker Ransomware group has targeted 50+ Organizations Worldwide	24 Mar 202206:30	–	hivepro

NVD

Vulners

Node

microsoft exchange_serverMatch2013cumulative_update_23

microsoft exchange_serverMatch2016cumulative_update_20

microsoft exchange_serverMatch2016cumulative_update_21

microsoft exchange_serverMatch2019cumulative_update_10

microsoft exchange_serverMatch2019cumulative_update_9

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 9",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0858.015",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 20",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2242.012",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.00.0",
        "lessThan": "15.00.1497.023",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 21",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2308.014",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 10",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0922.013",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-826/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206

21 Nov 2024 06:05Current

8.8High risk

Vulners AI Score8.8

CVSS 27.9

CVSS 3.17.6 - 8

EPSS0.07934

In Wild