Lucene search
HistoryMar 03, 2021 - 12:15 a.m.
CVE-2021-26858
microsoft
exchange
server
remote code execution
vulnerability
cve-2021-26858
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.1 High
AI Score
Confidence
High
0.223 Low
EPSS
Percentile
96.5%
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected configurations
Node
microsoftmicrosoft_exchange_server_2019Match15.02.0
ORmicrosoftexchange_serverRange15.00.0–2013cumulative update 22
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 2
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 13
ORmicrosoftexchange_serverRange15.00.0–2013cumulative update 23
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 3
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 14
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 4
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 15
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 5
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 6
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 16
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 17
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 7
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 18
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 19
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 8
ORmicrosoftexchange_serverRange15.00.0–2013cumulative update 21
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 12
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 8
ORmicrosoftexchange_serverRange15.02.0–2019cumulative update 1
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 9
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 10
ORmicrosoftexchange_serverRange15.01.0–2016cumulative update 11
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | microsoft_exchange_server_2019 | 15.02.0 | cpe:2.3:a:microsoft:microsoft_exchange_server_2019:15.02.0:*:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 22:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 2:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 13:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 23:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 3:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 14:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 4:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 15:*:*:*:*:*:* |
| microsoft | exchange_server | * | cpe:2.3:a:microsoft:exchange_server:*:cumulative update 5:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2013 Cumulative Update 22",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.00.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 2",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 13",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2013 Cumulative Update 23",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.00.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 3",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 14",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 4",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 15",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 5",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 6",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 16",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 17",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 7",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 18",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 19",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 8",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2013 Cumulative Update 21",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_21:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.00.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 12",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 8",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 1",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 9",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 10",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 11",
"cpes": [
"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
}
]Social References
More
Related
prion
prion
Remote code execution
2021-03-03 00:15:00
cvelist
cvelist
CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 23:55:27
attackerkb
attackerkb
CVE-2021-26858
2021-03-03 00:00:00
CVE-2021-26857
2021-03-03 00:00:00
cisa_kev
cisa_kev
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-03 00:00:00
nvd
nvd
CVE-2021-26858
2021-03-03 00:15:12
thn
thn
Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers
2021-04-23 07:42:00
Microsoft Exchange Cyber Attack — What Do We Know So Far?
2021-03-08 10:15:00
URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
2021-03-03 07:28:00
checkpoint_advisories
checkpoint_advisories
threatpost
threatpost
Prometei Botnet Could Fire Up APT-Style Attacks
2021-04-23 17:15:23
Microsoft Exchange Servers See ProxyLogon Patching Frenzy
2021-03-24 18:39:26
Microsoft Exchange 0-Day Attackers Spy on U.S. Targets
2021-03-03 15:30:52
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-03-08 07:28:21
Exploit for Vulnerability in Microsoft
2021-03-09 10:36:44
Exploit for Vulnerability in Microsoft
2021-03-05 08:22:07
msrc
msrc
securelist
securelist
Zero-day vulnerabilities in Microsoft Exchange Server
2021-03-04 17:20:57
Black Kingdom ransomware
2021-06-17 10:00:41
IT threat evolution Q1 2021
2021-05-31 10:00:37
hivepro
hivepro
Have you patched the vulnerabilities in Microsoft Exchange Server?
2021-08-18 11:01:05
cisa
cisa
Microsoft Releases Out-of-Band Security Updates for Exchange Server
2021-03-02 00:00:00
akamaiblog
akamaiblog
malwarebytes
malwarebytes
Patch now! Exchange servers attacked by Hafnium zero-days
2021-03-03 12:34:27
The top 5 most routinely exploited vulnerabilities of 2021
2022-04-29 16:28:20
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
impervablog
impervablog
carbonblack
carbonblack
fireeye
fireeye
krebs
krebs
Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails
2021-03-02 21:19:17
ics
ics
mmpc
mmpc
HAFNIUM targeting Exchange Servers with 0-day exploits
2021-03-02 21:07:53
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
2021-11-16 16:00:08
Profiling DEV-0270: PHOSPHORUS’ ransomware operations
2022-09-07 21:00:00
mssecure
mssecure
HAFNIUM targeting Exchange Servers with 0-day exploits
2021-03-02 21:07:53
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
2021-11-16 16:00:08
Profiling DEV-0270: PHOSPHORUS’ ransomware operations
2022-09-07 21:00:00
talosblog
talosblog
Threat Advisory: HAFNIUM and Microsoft Exchange zero-day
2021-03-08 10:18:43
rapid7blog
rapid7blog
Rapid7’s InsightIDR Enables Detection And Response to Microsoft Exchange Zero-Day
2021-03-03 00:41:04
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange
2021-03-23 14:04:36
Mass Exploitation of Exchange Server Zero-Day CVEs: What You Need to Know
2021-03-03 19:23:42
nessus
nessus
Security Updates for Microsoft Exchange Server (March 2021)
2021-03-03 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA12103 ACE vulnerabilities in Microsoft Exchange Server
2021-03-02 00:00:00
qualysblog
qualysblog
nuclei
nuclei
Microsoft Exchange Server SSRF Vulnerability
2021-03-06 07:00:59
avleonov
avleonov
Vulnerability Management news and publications #2
2022-08-14 11:30:44
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
mscve
mscve
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.1 High
AI Score
Confidence
High
0.223 Low
EPSS
Percentile
96.5%
Related for CVE-2021-26858