WID-SEC-W-2024-1897

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Exchange Server: Mehrere Schwachstellen

view advisory published 2021-07-13

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server 2013, Microsoft Exchange Server 2016 und Microsoft Exchange Server 2019 ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen und um Informationen offenzulegen.

describes (7)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-34523US	high7.5OT critical	100.0% (100th)	KEV	2021-07-14
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34473US	high10.0OT critical	100.0% (100th)	KEV	2021-07-14
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34470US	medium5.2	4.38% (91st)	Exploit	2021-07-14
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-33768US	medium5.2	1.23% (69th)	—	2021-07-14
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-33766US	medium5.0OT critical	98.2% (100th)	KEV	2021-07-14
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31206US	high7.9	13.0% (96th)	—	2021-07-14
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31196US	medium6.5OT critical	54.1% (99th)	KEV	2021-07-14
Microsoft Exchange Server Remote Code Execution Vulnerability

references

External citations — patches, advisories, analysis.

Microsoft Leitfaden für Sicherheitsupdates vom 2021-07-13external
The Hacker News vom 2021-08-30external
WID-SEC-W-2024-1897 - CSAF Versionself
WID-SEC-2024-1897 - Portal Versionself
CISA Known Exploited Vulnerabilities Catalog vom 2024-08-21external
Rapid7 Blog vom 2021-08-12external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan