VDB

CNVD-2020-14284

CNVD-2020-14284 PUBLISHED CVSS 8.699999809265137 HIGH

Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序，它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange Server存在远程代码执行漏洞，该漏洞源于程序未能正确处理内存中的对象。攻击者可借助特制的电子邮件利用该漏洞在系统用户的上下文中运行任意代码。

Risk Scores

CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 4unspecified
MicrosoftMicrosoft Exchange Server 2010 Service Pack 3 Update Rollup 30unspecified
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 3unspecified
MicrosoftMicrosoft Exchange Server 2013Cumulative Update 23
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 15unspecified
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 14*

Timeline

  • Feb 11, 2020 CVE Published
  • Mar 3, 2020 PoC Published
  • Mar 5, 2020 PoC Published
  • Mar 11, 2020 PoC Published
  • Sep 16, 2020 PoC Published
  • Oct 9, 2020 PoC Published
  • Oct 16, 2020 PoC Published
  • Oct 20, 2020 PoC Published
  • Oct 20, 2020 PoC Published
  • Oct 21, 2020 PoC Published
  • Oct 22, 2020 PoC Published
  • Oct 22, 2020 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›