CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS
8.8
Alta
EPSS
91.7%
p100
KEV
SIM
17 de nov. de 2021
Exploit Today
80
0-100
Publicado: 10 de nov. de 2021 · Última mod.: 19 de ago. de 2026
Produto
Microsoft / Exchange
Vulnerabilidade
Microsoft Exchange Server Remote Code Execution Vulnerability
Adicionado ao KEV
17 de nov. de 2021
Corrigir até
1 de dez. de 2021
Uso conhecido em ransomware
Sim
Descrição resumida
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42321
- packetstormsecurity.comhttp://packetstormsecurity.com/files/166153/Microsoft-Exchange-Server-Remote-Code-Execution.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/168131/Microsoft-Exchange-Server-ChainedSerializationBinder-Remote-Code-Execution.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42321
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42321
Nenhum CVE relacionado por CWE ou produto.