Lucene search
HistoryJul 14, 2021 - 6:15 p.m.
CVE-2021-34523
microsoft
exchange
elevation
privilege
vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS
0.81
Percentile
98.4%
Microsoft Exchange Server Elevation of Privilege Vulnerability
Affected configurations
Node
microsoftexchange_serverMatch2013cumulative_update_23
ORmicrosoftexchange_serverMatch2016cumulative_update_19
ORmicrosoftexchange_serverMatch2016cumulative_update_20
ORmicrosoftexchange_serverMatch2019cumulative_update_8
ORmicrosoftexchange_serverMatch2019cumulative_update_9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | exchange_server | 2013 | cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:* |
| microsoft | exchange_server | 2016 | cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:* |
| microsoft | exchange_server | 2016 | cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:* |
| microsoft | exchange_server | 2019 | cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:* |
| microsoft | exchange_server | 2019 | cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:* |
Related
zdi
zdi
threatpost
threatpost
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
2021-09-09 14:30:56
IKEA Hit by Email Reply-Chain Cyberattack
2021-11-29 21:22:12
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
cisa_kev
cisa_kev
Microsoft Exchange Server Privilege Escalation Vulnerability
2021-11-03 00:00:00
mscve
mscve
Microsoft Exchange Server Elevation of Privilege Vulnerability
2021-07-13 07:00:00
prion
prion
Privilege escalation
2021-07-14 18:15:00
cvelist
cvelist
attackerkb
attackerkb
CVE-2021-34523
2021-07-14 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
cve
cve
CVE-2021-34523
2021-07-14 18:15:12
checkpoint_advisories
checkpoint_advisories
msrc
msrc
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
Metasploit Wrap-Up
2021-08-20 19:12:00
hivepro
hivepro
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
2021-09-04 15:34:03
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
Exploit for Server-Side Request Forgery in Microsoft
2022-06-29 12:37:31
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
malwarebytes
malwarebytes
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
mmpc
mmpc
The five-day job: A BlackByte ransomware intrusion case study
2023-07-06 17:00:00
nessus
nessus
Security Updates for Microsoft Exchange Server (April 2021)
2021-04-13 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA12224 Multiple vulnerabilities in Microsoft Exchange Server
2021-07-13 00:00:00
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
avleonov
avleonov
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS
0.81
Percentile
98.4%
Related for NVD:CVE-2021-34523