Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-31207
HistoryMay 11, 2021 - 7:15 p.m.

CVE-2021-31207

2021-05-1119:15:10
CWE-434
[email protected]
web.nvd.nist.gov
1361
In Wild
35
cve-2021-31207
microsoft exchange server
security
feature bypass
vulnerability
nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.967

Percentile

99.7%

JSON

Microsoft Exchange Server Security Feature Bypass Vulnerability

Affected configurations

Vulners
NVD
Node
microsoftexchange_serverMatch2013cumulative_update_23
Node
microsoftexchange_serverMatch2019cumulative_update_9
Node
microsoftexchange_serverMatch2016cumulative_update_20
Node
microsoftexchange_serverMatch2016cumulative_update_19
Node
microsoftexchange_serverMatch2019cumulative_update_8
VendorProductVersionCPE
microsoftexchange_server*cpe:2.3:a:microsoft:exchange_server:*:cumulative update 23:*:*:*:*:*:*
microsoftexchange_server*cpe:2.3:a:microsoft:exchange_server:*:cumulative update 9:*:*:*:*:*:*
microsoftexchange_server*cpe:2.3:a:microsoft:exchange_server:*:cumulative update 20:*:*:*:*:*:*
microsoftexchange_server*cpe:2.3:a:microsoft:exchange_server:*:cumulative update 19:*:*:*:*:*:*
microsoftexchange_server*cpe:2.3:a:microsoft:exchange_server:*:cumulative update 8:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.00.0",
        "lessThan": "15.00.1497.018",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 9",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0858.012",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 20",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2242.010",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.01.0",
        "lessThan": "15.01.2176.014",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
    "cpes": [
      "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.02.0",
        "lessThan": "15.02.0792.015",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Social References

More

Related

prion 1
checkpoint_advisories 1
cvelist 1
mscve 1
attackerkb 2
zdi 1
cisa_kev 1
nvd 1
rapid7blog 6
thn 9
malwarebytes 5
githubexploit 2
packetstorm 1
threatpost 6
hivepro 7
cisa 1
pentestpartners 1
fireeye 1
zdt 1
metasploit 1
trellix 2
qualysblog 9
nessus 1
mskb 1
kaspersky 1
ics 5
securelist 3
mmpc 2
avleonov 2
mssecure 1
prion
prion
Security feature bypass
2021-05-11 19:15:00
checkpoint_advisories
checkpoint_advisories
Microsoft Exchange Server Security Feature Authentication Bypass (CVE-2021-31207)
2021-12-16 00:00:00
cvelist
cvelist
CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-05-11 19:11:41
mscve
mscve
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-05-11 07:00:00
attackerkb
attackerkb
CVE-2021-31207
2021-05-11 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
zdi
zdi
(Pwn2Own) Microsoft Exchange Server Arbitrary File Write Remote Code Execution Vulnerability
2021-07-19 00:00:00
cisa_kev
cisa_kev
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-11-03 00:00:00
nvd
nvd
CVE-2021-31207
2021-05-11 19:15:10
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
Metasploit Wrap-Up
2021-08-20 19:12:00
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
malwarebytes
malwarebytes
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
AvosLocker ransomware uses Microsoft Exchange Server vulnerabilities, says FBI
2022-03-21 21:09:12
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
Exploit for Vulnerability in Microsoft
2021-08-10 15:01:02
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
threatpost
threatpost
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks
2021-11-03 18:16:37
New APT ChamelGang Targets Russian Energy, Aviation Orgs
2021-10-01 12:36:25
hivepro
hivepro
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
nessus
nessus
Security Updates for Exchange (May 2021)
2021-05-11 00:00:00
mskb
mskb
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: May 11, 2021 (KB5003435)
2021-05-11 07:00:00
kaspersky
kaspersky
KLA12169 Multiple vulnerabilities in Microsoft Exchange Server
2021-05-11 00:00:00
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
2024-07-08 12:00:00
Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations
2022-09-14 12:00:00
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
mmpc
mmpc
The five-day job: A BlackByte ransomware intrusion case study
2023-07-06 17:00:00
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00
avleonov
avleonov
Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs
2021-08-31 23:16:51
Vulnerability Management news and publications #2
2022-08-14 11:30:44
mssecure
mssecure
Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself
2022-05-09 13:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.967

Percentile

99.7%

JSON
Related for CVE-2021-31207
prion1checkpoint_advisories1cvelist1mscve1attackerkb2zdi1cisa_kev1nvd1rapid7blog6thn9malwarebytes5githubexploit2packetstorm1threatpost6hivepro7cisa1pentestpartners1fireeye1zdt1metasploit1trellix2qualysblog9nessus1mskb1kaspersky1ics5securelist3mmpc2avleonov2mssecure1