CVE-2021-31196: high-severity vulnerability in Microsoft Exchange Server 2013 Cumulative…
Microsoft Exchange Server Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Microsoft Exchange Server has a vulnerability that allows attackers to execute arbitrary code remotely on affected servers. This is critical because Exchange handles email for many organizations, giving attackers access to sensitive business communications and systems.
The vulnerability in Microsoft Exchange Server allows remote code execution through a network vector without requiring authentication. Exploitation results in complete server compromise with attacker-level privileges, directly impacting confidentiality, integrity, and availability of email infrastructure.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.