HIGH 8.0 Microsoft PoC
CVE-2021-34470
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Security Update 2021-Jul: Microsoft Exchange Server Elevation of Privilege Vulnerability
Affected Products
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 10
- Microsoft Exchange Server 2016 Cumulative Update 21
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34470
- https://nvd.nist.gov/vuln/detail/CVE-2021-34470
This high severity vulnerability with a CVSS score of 8.0 was published on 2021-07-13 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. Affected: Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 21.
vulnfeed aggregates 12641 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.