Microsoft Exchange FileLog Exposed Dangerous Function Denial-of-Service Vulnerability

🗓️ 22 Nov 2022 00:00:00Reported by Piotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeType

zdi

zdi🔗 www.zerodayinitiative.com👁 51 Views

Microsoft Exchange FileLog vulnerability allows remote attackers to delete files and create denial-of-service condition. Authentication required to exploit

Reporter	Title	Published	Views	Family All 129
GithubExploit	Exploit for CVE-2022-41080	23 Dec 202223:46	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	16 May 202513:08	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Dec 202209:35	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	9 Oct 202221:15	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Dec 202209:35	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	21 Feb 202302:59	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	24 Oct 202412:56	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Dec 202209:35	–	githubexploit
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ICS	#StopRansomware: Play Ransomware	18 Dec 202312:00	–	ics

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41082

22 Nov 2022 00:00Current

2.1Low risk

Vulners AI Score2.1

CVSS 37.6

EPSS0.99964

microsoft exchange filelog vulnerability remote attackers delete files denial-of-service authentication