Exploit / PoCcritical

Microsoft: Chinese APT Targeted Exchange Servers With Four Zero

The RecordJan 30, 2023 · 00:00 UTC (Jan 30, 2023)2 min read3 · 2 reads

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-27078 CVE-2021-26854 CVE-2021-26412

Tags: cve-2021-26855 cve-2021-26857 cve-2021-26858 cve-2021-27065 cve-2021-27078 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26855 +6 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858 CVE-2021-26412 CVE-2021-27078 CVE-2021-26854	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

Technology giant Microsoft released emergency security updates today for its Exchange email server to patch four zero-day vulnerabilities that were exploited by a Chinese state-sponsored hacking group. Named Hafnium , Microsoft said the group has a history of targeting internet-facing servers as an entry point into its targets' internal networks.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.