by Kastro
Paper/Archive/CVE-2021-26855

CVE-2021-26855

Microsoft Microsoft Exchange Server 2013 Cumulative Update 21 — Microsoft Exchange Server Remote Code Execution Vulnerability

KEV · due 3 Mayransomware useEPSS 100%public exploitSSVC actCVSS 9.1
critical.is priorityof 100
97
CVSS 9.1 (CNA)9.1 / 10 × 3027.3In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Microsoft Exchange Server Remote Code Execution Vulnerability

Affected

ProductAffectedFixed inSource
Microsoft Exchange Server 2013 Cumulative Update 2115.00.0 – < 15.00.1395.01215.00.1395.012CNA
Microsoft Exchange Server 2013 Cumulative Update 2215.00.0 – < 15.00.1473.00615.00.1473.006CNA
Microsoft Exchange Server 2013 Cumulative Update 2315.00.0 – < 15.00.1497.01215.00.1497.012CNA
Microsoft Exchange Server 2016 Cumulative Update 1015.01.0 – < 15.01.1531.01215.01.1531.012CNA
Microsoft Exchange Server 2016 Cumulative Update 1115.01.0 – < 15.01.1591.01815.01.1591.018CNA
Microsoft Exchange Server 2016 Cumulative Update 1215.01.0 – < 15.01.1713.01015.01.1713.010CNA
Microsoft Exchange Server 2016 Cumulative Update 1315.01.0 – < 15.01.1779.00815.01.1779.008CNA
Microsoft Exchange Server 2016 Cumulative Update 1415.01.0 – < 15.01.1847.01215.01.1847.012CNA
Microsoft Exchange Server 2016 Cumulative Update 1515.01.0 – < 15.01.1913.01215.01.1913.012CNA
Microsoft Exchange Server 2016 Cumulative Update 1615.01.0 – < 15.01.1979.00815.01.1979.008CNA
Microsoft Exchange Server 2016 Cumulative Update 1715.01.0 – < 15.01.2044.01315.01.2044.013CNA
Microsoft Exchange Server 2016 Cumulative Update 1815.01.0 – < 15.01.2106.01315.01.2106.013CNA

Scores by source

microsoft (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

patchmsrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855refpacketstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.htmlrefpacketstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.htmlrefpacketstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.htmlrefpacketstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26855kevcisa.gov/known-exploited-vulnerabilities-catalog