Exploit / PoCcriticalExploited in the wild

US CISA adds MS Exchange bug CVE-2022-41080 to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsJan 11, 2023 · 10:49 UTC (Jan 11, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-41080 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-41080 CVE-2022-41082 CVE-2022-41040 CVE-2023-21674

Tags: cve-2022-41080 cve-2022-41082 cve-2022-41040 cve-2023-21674 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022
CVE-2022-41080	Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns	8.8	77%	KEVRansomware	Nov 9, 2022 KEV Jan 10, 2023
CVE-2023-21674	Use-After-Free Privilege Escalation in Microsoft Windows ALPC	8.8	34%	KEV	Jan 10, 2023 KEV Jan 10, 2023

From the original article

2 min read at securityaffairs.com

US CISA added Microsoft Exchange elevation of privileges bug CVE-2022-41080 to its Known Exploited Vulnerabilities Catalog. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.