Lucene search
HistoryJul 14, 2021 - 6:15 p.m.
CVE-2021-34523
cve-2021-34523
microsoft exchange
elevation of privilege
vulnerability
nvd
9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
8.8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.782 High
EPSS
Percentile
98.2%
Microsoft Exchange Server Elevation of Privilege Vulnerability
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 23:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 9:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 20:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 19:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 8:*:*:*:*:*:* |
References
Social References
More
Related
mscve
mscve
Microsoft Exchange Server Elevation of Privilege Vulnerability
2021-07-13 07:00:00
cisa_kev
cisa_kev
Microsoft Exchange Server Privilege Escalation Vulnerability
2021-11-03 00:00:00
threatpost
threatpost
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
2021-09-09 14:30:56
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
IKEA Hit by Email Reply-Chain Cyberattack
2021-11-29 21:22:12
zdi
zdi
prion
prion
Privilege escalation
2021-07-14 18:15:00
checkpoint_advisories
checkpoint_advisories
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
hivepro
hivepro
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
thn
thn
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns
2021-11-22 11:47:00
attackerkb
attackerkb
ProxyShell Exploit Chain
2021-08-20 00:00:00
CVE-2021-34523
2021-07-14 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
malwarebytes
malwarebytes
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
msrc
msrc
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
Metasploit Wrap-Up
2021-08-20 19:12:00
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
ics
ics
mmpc
mmpc
The five-day job: A BlackByte ransomware intrusion case study
2023-07-06 17:00:00
kaspersky
kaspersky
KLA12224 Multiple vulnerabilities in Microsoft Exchange Server
2021-07-13 00:00:00
nessus
nessus
Security Updates for Microsoft Exchange Server (April 2021)
2021-04-13 00:00:00
mskb
mskb
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
avleonov
avleonov
9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
8.8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.782 High
EPSS
Percentile
98.2%
Related for CVE-2021-34523