Microsoft Exchange - Remote Code Execution (ProxyShell - CVE-2021-34473, CVE-2021-34523, CVE-2021-31207)
- Severity
- Vulnerability description
- Not available
- Risk description
- Not available
- Exploit capabilities
Sniper can gain unauthenticated Remote Code Execution on the target system and extract multiple artefacts as evidence.
- Recommendation
- Not available
- References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34473https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34523https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31207
- Codename
- ProxyShell
- Detectable with
- Network Scanner
- Scan engine
- Sniper
- Exploitable with Sniper
- Yes
- CVE Published
- Aug 1, 2021
- Detection added at
- Software Type
- Email server
- Vendor
- Microsoft
- Product
- Exchange Server
Detect this vulnerability now!
Check your clients' targets (or your own) for this vulnerability and thousands more! Get proof for validation with our ethical hacking toolkit.