VulnerabilityhighExploited in the wild

Hackers Actively Searching for Unpatched Microsoft Exchange Servers

The Hacker Newsby @TheHackersNewsAug 15, 2021 · 00:00 UTC (Aug 15, 2021)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-26855 CVE-2021-27065 CVE-2021-34473 CVE-2021-34523 CVE-2021-26857 CVE-2021-26858 CVE-2021-31195 CVE-2021-31196 CVE-2021-31207 CVE-2021-33768

Tags: cve-2021-26855 cve-2021-27065 cve-2021-34473 cve-2021-34523 cve-2021-26857 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26855 +3 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-31207 +1 related CVE CVE-2021-31195	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6 group max	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +3 related CVEs CVE-2021-34523 CVE-2021-31196 CVE-2021-33768	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

Threat actors are actively carrying out opportunistic scanning and exploitation of Exchange servers using a new exploit chain leveraging a trio of flaws affecting on-premises installations, making them the latest set of bugs after ProxyLogon vulnerabilities were exploited en masse at the start of the year. The remote code execution flaws have been collectively dubbed "ProxyShell."

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.