Microsoft Exchange Server: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.3
  CVE-2021-33766 Exploited Public exploit Scanner template EPSS 98%

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Jan 18, 2022
• High 7.2
  CVE-2021-31196 Exploited EPSS 54%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 21
  Jul 14, 2021

  KEV Aug 21, 2024
• High 8.0
  CVE-2021-33768

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2016 Cumulative Update 20
  Jul 14, 2021
• High 8.0
  CVE-2021-34470 Public exploit

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021
• High 7.6
  CVE-2021-31206 EPSS 13%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021

Revision history

1. 2024-08-21 #5

   Aktive Ausnutzung von CVE-2021-31196

2. 2021-08-30 #4

   Aktive Ausnutzung von CVE-2021-33766

3. 2021-08-12 #3

   Aktive Ausnutzung von CVE-2021-34473 und CVE-2021-34523

4. 2021-08-08 #2

   Schwachstellen auch bekannt als ProxyOracle bzw. ProxyShell

5. 2021-07-13 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates vom 2021-07-13
  https://msrc.microsoft.com/update-guide
• Rapid7 Blog vom 2021-08-12
  https://www.rapid7.com/blog/post/2021/08/12/proxyshell-more-widespread-exploitation-of-microsoft-exchange-servers/
• The Hacker News vom 2021-08-30
  https://thehackernews.com/2021/08/new-microsoft-exchange-proxytoken-flaw.html
• CISA Known Exploited Vulnerabilities Catalog vom 2024-08-21
  https://www.cisa.gov/news-events/alerts/2024/08/21/cisa-adds-four-known-exploited-vulnerabilities-catalog