CNVD-2021-90307 — Vulnetix

CNVD-2021-90307 PUBLISHED CVSS 8.699999809265137 HIGH

Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange Server存在远程代码执行漏洞，攻击者可通过发送特制的恶意数据到服务器利用该漏洞在服务器上远程执行任意代码。

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 11	15.02.0
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 22	15.0.0
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 10	15.02.0
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 21	15.01.0

Exploit Intelligence

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42321 (circl)
http://packetstormsecurity.com/files/166153/Microsoft-Exchange-Server-Remote-Code-Execution.html (circl)
http://packetstormsecurity.com/files/168131/Microsoft-Exchange-Server-ChainedSerializationBinder-Remote-Code-Execution.html (circl)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42321 (circl)
CIRCL exploited: CVE-2021-42321 (circl-sighting)
CIRCL seen: CVE-2021-42321 (circl-sighting)
CIRCL seen: CVE-2021-42321 (circl-sighting)
CIRCL seen: CVE-2021-42321 (circl-sighting)
CIRCL seen: CVE-2021-42321 (circl-sighting)
CIRCL seen: CVE-2021-42321 (circl-sighting)

…and 7 more exploits

Timeline

Aug 24, 2021 CVE Published
Nov 10, 2021 PoC Published
Nov 20, 2021 PoC Published
Nov 24, 2021 PoC Published
Aug 19, 2022 PoC Published
Dec 6, 2024 PoC Published
Dec 24, 2024 PoC Published
Feb 6, 2025 PoC Published
Feb 23, 2025 PoC Published
Feb 23, 2025 PoC Published
Feb 28, 2025 PoC Published
Sep 30, 2025 PoC Published

References

Open in Interactive Console →