microsoft safety scanner exchange vulnerability

The scale of the attack is the biggest concern at this time.

To be clear, the four vulnerabilities listed below affect Microsoft Exchange Server, while Exchange Online is unaffected.ĬVE-2021-26855: Unauthenticated Server Side Request Forgery (SSRF), also being called ProxyLogonĬVE-2021-26857 : Insecure deserialization vulnerability in the Exchange Unified Messaging ServiceĬVE-2021-27065 : Authenticated arbitrary file write vulnerabilityĬVE-2021-26858: Authenticated arbitrary file write vulnerability Unauthenticated exploitation lowers the barrier to entry for an attacker that is able to communicate with the vulnerable exchange servers. The impact is critical due to the plethora of private/confidential communications in corporate email systems as well as the abundance of vulnerable servers on the internet. The latest attack on Microsoft Exchange servers encompasses several unique vulnerabilities in an attack chain. Exploitation of these 0-day vulnerabilities has been detected world-wide and defenders are actively patching, mitigating and most importantly, conducting incident response to understand the depth of their potential compromise. It is difficult to overstate the severity and reach of the latest group of vulnerabilities disclosed in on-premise Microsoft Exchange servers earlier this month.

Microsoft safety scanner exchange vulnerability