Exploit / PoCcriticalExploited in the wild

PoC exploit code for ProxyNotShell Microsoft Exchange bugs released online

Security Affairsby @securityaffairsNov 20, 2022 · 19:41 UTC (Nov 20, 2022)2 min read3

Read at securityaffairs.com

Analyze CVE-2022-41040 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-41040 CVE-2022-41082

Tags: cve-2022-41040 cve-2022-41082 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022

From the original article

2 min read at securityaffairs.com

Proof-of-concept exploit code for two actively exploited Microsoft Exchange ProxyNotShell flaws released online. Proof-of-concept exploit code has been released online for two actively exploited vulnerabilities in Microsoft Exchange, known as ProxyNotShell . CVE-2022-41040 – Microsoft Exchange Server Elevation of Privilege Vulnerability

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.