VDB
BDU%3A2021-01120
BDU%3A2021-01120
PUBLISHED
CVSS 10 CRITICAL
Уязвимость почтового сервера Microsoft Exchange Server, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю перезаписать произвольные файлы в системе
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft Exchange Server |
Timeline
- Mar 2, 2021 PoC Published
- Mar 3, 2021 CVE Published
- Mar 4, 2021 PoC Published
- Mar 6, 2021 PoC Published
- Apr 26, 2021 PoC Published
- Sep 23, 2021 PoC Published
- Dec 21, 2021 PoC Published
- Feb 6, 2022 PoC Published
- Feb 9, 2022 PoC Published
- Jul 7, 2022 PoC Published
- Jul 15, 2022 PoC Published
- Sep 16, 2022 PoC Published
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-27065 url
- https://www.cybersecurity-help.cz/vdb/SB2021030301 url
- https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/ url
- http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html url
- http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html url