Lucene search
Orange Tsai(@orange_8361) from DEVCORE Research TeamZDI-21-819HistoryJul 19, 2021 - 12:00 a.m.
(Pwn2Own) Microsoft Exchange Server Arbitrary File Write Remote Code Execution Vulnerability
2021-07-1900:00:00
Orange Tsai(@orange_8361) from DEVCORE Research Team
www.zerodayinitiative.com
137
microsoft exchange server
arbitrary file write
remote code execution
bypassed authentication
user-supplied data
system context
EPSS
0.962
Percentile
99.6%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of mailbox export. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM.
Related
prion
prion
Security feature bypass
2021-05-11 19:15:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
mscve
mscve
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-05-11 07:00:00
attackerkb
attackerkb
CVE-2021-31207
2021-05-11 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
nvd
nvd
CVE-2021-31207
2021-05-11 19:15:10
cisa_kev
cisa_kev
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-11-03 00:00:00
cve
cve
CVE-2021-31207
2021-05-11 19:15:10
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
Metasploit Wrap-Up
2021-08-20 19:12:00
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
threatpost
threatpost
ProxyShell Attacks Pummel Unpatched Exchange Servers
2021-08-23 18:54:29
‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks
2021-11-03 18:16:37
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
malwarebytes
malwarebytes
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
hivepro
hivepro
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
2021-09-04 15:34:03
Exploit for Vulnerability in Microsoft
2021-08-10 15:01:02
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
mskb
mskb
nessus
nessus
Security Updates for Exchange (May 2021)
2021-05-11 00:00:00
kaspersky
kaspersky
KLA12169 Multiple vulnerabilities in Microsoft Exchange Server
2021-05-11 00:00:00
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
mmpc
mmpc
avleonov
avleonov
mssecure
mssecure