Lucene search
OrangetwZDI-21-821HistoryJul 19, 2021 - 12:00 a.m.
(Pwn2Own) Microsoft Exchange Server Autodiscover Server Side Request Forgery Authentication Bypass Vulnerability
2021-07-1900:00:00
orangetw
www.zerodayinitiative.com
722
microsoft exchange server
autodiscover
server side request forgery
authentication bypass
vulnerability
arbitrary code
remote access
EPSS
0.973
Percentile
99.9%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Autodiscover service. The issue results from the lack of proper validation of URI prior to accessing resources. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM.
Related
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Microsoft
2021-08-16 11:27:13
Exploit for Server-Side Request Forgery in Microsoft
2022-11-16 08:22:29
Exploit for Server-Side Request Forgery in Microsoft
2021-11-22 07:47:09
nvd
nvd
CVE-2021-34473
2021-07-14 18:15:11
mscve
mscve
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-07-13 07:00:00
cvelist
cvelist
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
2021-07-14 17:54:03
attackerkb
attackerkb
CVE-2021-34473
2021-07-14 00:00:00
ProxyShell Exploit Chain
2023-12-28 00:00:00
cisa_kev
cisa_kev
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-03 00:00:00
prion
prion
Remote code execution
2021-07-14 18:15:00
hivepro
hivepro
MuddyWater is taking advantage of old vulnerabilities
2021-11-18 11:45:32
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
cve
cve
CVE-2021-34473
2021-07-14 18:15:11
checkpoint_advisories
checkpoint_advisories
threatpost
threatpost
Attackers Hijack Email Using Proxy Logon/Proxyshell Flaws
2021-11-22 19:26:25
IKEA Hit by Email Reply-Chain Cyberattack
2021-11-29 21:22:12
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
thn
thn
Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns
2021-11-22 11:47:00
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
msrc
msrc
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
Metasploit Wrap-Up
2021-08-20 19:12:00
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
malwarebytes
malwarebytes
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
impervablog
impervablog
Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082
2022-09-30 16:47:34
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
ics
ics
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
2022-05-06 12:19:24
nuclei
nuclei
Exchange Server - Remote Code Execution
2021-08-10 07:59:06
mmpc
mmpc
nessus
nessus
Security Updates for Microsoft Exchange Server (April 2021)
2021-04-13 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA12224 Multiple vulnerabilities in Microsoft Exchange Server
2021-07-13 00:00:00
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
mssecure
mssecure
avleonov
avleonov