CVE-2020-17144highunder attackCWE-502

CVE-2020-17144: high-severity vulnerability in Microsoft Exchange Server 2010 Service Pack 3…

Microsoft Exchange Remote Code Execution Vulnerability

Published · Updated

88Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 8.4epss 37%
from disclosure to weapon0 days
Published on NVDDec 9
1st PoCDec 9
CISA KEV+329d
exploitation probability
37%top 2% of all CVEs
observed exploitation
yesCISA + VulnCheck
7 public exploit(s)
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Microsoft Exchange has a vulnerability that allows attackers to execute malicious code remotely on affected servers. An attacker can exploit this flaw to take full control of the email system and access sensitive data.

Technical detail

This vulnerability involves unsafe deserialization of untrusted data in Microsoft Exchange, allowing remote code execution without authentication. An attacker can send specially crafted requests to trigger arbitrary code execution with SYSTEM privileges, leading to complete server compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft Exchange Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Microsoft · Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31
public PoCs found — 7
githubgithub.com/Airboi/CVE-2020-17144-EXP★ 157githubgithub.com/zcgonvh/CVE-2020-17144★ 157vulncheckvulncheck.com/xdb/3c6c5d3ca673unverifiedvulncheckvulncheck.com/xdb/bbc21fba2ce0unverifiedvulncheckvulncheck.com/xdb/78f51572c784unverifiedvulncheckvulncheck.com/xdb/72b878cc1c22unverifiedvulncheckvulncheck.com/xdb/bf12a0733fb9unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17144https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17144