Kaspersky LabKLA12000KLA12000 Multiple vulnerabilities in Microsoft Exchange Server
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
9 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.7%
Detect date:
11/10/2020
Severity:
High
Description:
Multiple vulnerabilities were found in Microsoft Echange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Affected products:
Microsoft Exchange Server 2019 Cumulative Update 7
Microsoft Exchange Server 2016 Cumulative Update 17
Microsoft Exchange Server 2019 Cumulative Update 6
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 18
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2020-17083
CVE-2020-17084
CVE-2020-17085
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2020-170835.5High
CVE-2020-170848.5Critical
CVE-2020-170856.2High
KB list:
Microsoft official advisories:
References
support.microsoft.com/kb/4588741
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17083
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17084
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17085
nvd.nist.gov/vuln/detail/CVE-2020-17083
nvd.nist.gov/vuln/detail/CVE-2020-17084
nvd.nist.gov/vuln/detail/CVE-2020-17085
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Exchange-Server/
Related
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
9 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.013 Low
EPSS
Percentile
85.7%