Lucene search
HistoryOct 03, 2022 - 1:15 a.m.
CVE-2022-41082
microsoft exchange server
remote code execution
vulnerability
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.134
Percentile
95.7%
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected configurations
Node
microsoftexchange_serverMatch2013cumulative_update_23
ORmicrosoftexchange_serverMatch2016cumulative_update_22
ORmicrosoftexchange_serverMatch2016cumulative_update_23
ORmicrosoftexchange_serverMatch2019cumulative_update_11
ORmicrosoftexchange_serverMatch2019cumulative_update_12
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | exchange_server | 2013 | cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:* |
| microsoft | exchange_server | 2016 | cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:* |
| microsoft | exchange_server | 2016 | cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:* |
| microsoft | exchange_server | 2019 | cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:* |
| microsoft | exchange_server | 2019 | cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:* |
References
packetstormsecurity.com/files/170066/Microsoft-Exchange-ProxyNotShell-Remote-Code-Execution.html
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41082
www.kb.cert.org/vuls/id/915563
www.secpod.com/blog/microsoft-november-2022-patch-tuesday-patches-65-vulnerabilities-including-6-zero-days/
Related
zdi
zdi
prion
prion
Remote code execution
2022-10-03 01:15:00
cnvd
cnvd
cvelist
cvelist
CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability
2022-10-03 00:00:00
githubexploit
githubexploit
Exploit for CVE-2022-41082
2022-10-03 04:54:38
Exploit for CVE-2022-41082
2022-09-30 20:59:46
Exploit for CVE-2022-41082
2022-10-03 05:57:11
cve
cve
CVE-2022-41082
2022-10-03 01:15:08
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-12-02 21:00:13
mscve
mscve
Microsoft Exchange Server Remote Code Execution Vulnerability
2022-09-30 07:00:00
checkpoint_advisories
checkpoint_advisories
msrc
msrc
thn
thn
wordfence
wordfence
cisa
cisa
krebs
krebs
Microsoft: Two New 0-Day Flaws in Exchange Server
2022-09-30 16:51:57
Patch Tuesday, November 2022 Election Edition
2022-11-09 01:50:14
malwarebytes
malwarebytes
[updated]Two new Exchange Server zero-days in the wild
2022-09-30 13:00:00
Ransomware in December 2022
2023-02-01 17:15:00
Rackspace confirms it suffered a ransomware attack
2022-12-08 12:00:00
attackerkb
attackerkb
CVE-2022-41080
2022-11-09 00:00:00
CVE-2022-41082
2022-10-03 00:00:00
hackread
hackread
Microsoft Confirms Two 0-Days Being Exploited Against Exchange Servers
2022-09-30 17:56:35
qualysblog
qualysblog
talosblog
talosblog
cert
cert
cisa_kev
cisa_kev
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
2022-09-30 00:00:00
Microsoft Exchange Server Privilege Escalation Vulnerability
2023-01-10 00:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2022-09-30 00:00:00
mssecure
mssecure
packetstorm
packetstorm
Microsoft Exchange ProxyNotShell Remote Code Execution
2022-11-30 00:00:00
nessus
nessus
Security Updates for Microsoft Exchange Server (Nov 2022)
2022-11-11 00:00:00
hivepro
hivepro
Unpatched zero-day vulnerabilities of Microsoft Exchange Server
2022-09-30 10:21:56
kaspersky
kaspersky
KLA19264 Multiple vulnerabilities in Microsoft Server Software
2022-09-30 00:00:00
mmpc
mmpc
akamaiblog
akamaiblog
wizblog
wizblog
metasploit
metasploit
Microsoft Exchange ProxyNotShell RCE
2022-11-18 22:00:27
impervablog
impervablog
Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082
2022-09-30 16:47:34
ics
ics
#StopRansomware: Play Ransomware
2023-12-18 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
IT threat evolution in Q3 2022. Non-mobile statistics
2022-11-18 08:10:34
mskb
mskb
trellix
trellix
The Bug Report October 2022 Edition
2022-11-02 00:00:00
The Bug Report October 2022 Edition
2022-11-02 00:00:00
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.134
Percentile
95.7%
Related for NVD:CVE-2022-41082