Critical 1 exploited CVE MSRC-CVE-2021-34473 1 CVE

Microsoft Exchange Server Remote Code Execution Vulnerability

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

Details

Security updates
15.00.1497.015 — https://support.microsoft.com/help/5001779

Vulnerabilities 1

Critical 9.1

CVE-2021-34473 Exploited · Ransomware Public exploit Scanner template EPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Jul 14, 2021
KEV Nov 3, 2021

Revision history

2021-07-13 #1
Information published. This CVE was addressed by updates that were released in April 2021, but the CVE was inadvertently omitted from the April 2021 Security Updates. This is an informational change only. Customers who have already installed the April 2021 update do not need to take any further action.

References

CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34473
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss