U/OO/158036-21
media.defense.gov · Undated · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2020-0688Microsoft Exchange Server Validation Key Remote Code Execution VulnerabilityMicrosoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1505.003Web Shell+2 more · 3 reports>99.9%Top 0.03%86.9priority
- CVE-2020-17144Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft · Exchange ServerKEVPublic exploitHigh · 8.4T1059Command and Scripting Interpreter1 report36.5%Top 1.5%72.4priority
Where it names them
CVE-2020-0688 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
servers using CVE 2020-0688 and CVE 2020-17144, for remote code execution and
The actors used a variety of public exploits, including CVE 2020-0688 and CVE 2020-17144 to gain privileged
CVE-2020-17144 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
servers using CVE 2020-0688 and CVE 2020-17144, for remote code execution and
2020-0688 and CVE 2020-17144 to gain privileged
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.