High MSRC-CVE-2021-31206 1 CVE

Microsoft Exchange Server Remote Code Execution Vulnerability

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Was this vulnerability found in the 2021 Pwn2Own contest?
Yes, this was one of the Exchange Server vulnerabilities found in the 2021 Pwn2Own contest.

Security updates
15.02.0858.015 — https://support.microsoft.com/help/5004780
15.01.2242.012 — https://support.microsoft.com/help/5004779
15.00.1497.023 — https://support.microsoft.com/help/5004778

Vulnerabilities 1

High 7.6

CVE-2021-31206 EPSS 13%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10

Jul 14, 2021

Revision history

2021-07-13 #1
Information published.

References

CVE-2021-31206 Microsoft Exchange Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31206
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss