Patchfirst
Patchfirst
CVE-2021-31206 High · 7.6 EPSS 13.0%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Microsoft Exchange Server 2013 Cumulative Update 23

Summary

Microsoft Exchange Server 2013 Cumulative Update 23 contains a remote code execution vulnerability in the Exchange Server component. An unauthenticated remote attacker over the network can exploit it with low complexity, but it requires a user to interact with the crafted content or request.

Heading is the official description · CVE.org
Breakdown
76.5 / 100
Exploited
Yes, in VulnCheck KEV
Reports
1
Tactics
0/15

First seen exploited 6 months after disclosure.

  1. Disclosedday 0
  2. First seen exploitedVulnCheck KEV evidence+6 mo

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Named in 1 threat report
1 reportLinkedIn

Reports are matched by finding the exact id CVE-2021-31206 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.

Also mentioned in 24 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

3 links, grouped by NVD tag

vendor-advisory 1

msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31206

x_refsource_MISC 2

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206zerodayinitiative.com/advisories/ZDI-21-826/
↑ ↓ chooseEnter openEsc close