exploit/windows/http/exchange_proxynotshell_rce

weaponized

Microsoft Exchange ProxyNotShell RCE

view exploit source metasploittype exploitpublished 2022-09-28catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-41082US	—OT critical	100.0% (100th)	KEV	2022-10-03
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41040US	—OT critical	100.0% (100th)	KEV	2022-10-03
Microsoft Exchange Server Elevation of Privilege Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.