CVE-2023-36745

Microsoft Exchange Server uzaktan kod calistirma acigi. Ursnif ve kurumsal ag sizmalarinda kullanilan kritik Exchange acigi. Kimlik dogrulama gerekmeksizin istismar edilebilir.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity Yüksek

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Exchange Server 2016/2019

Exploitation Method Remote Code Execution

MITRE ATT&CK T1210 - Exploitation of Remote Services

CVE-2023-36745 Analizi

Microsoft Exchange Server kritik RCE acigi. Kimlik dogrulama olmaksizin uzaktan kod calistirma imkani taniyor. Ursnif grubu bu acigi Exchange sunucularini ilk erisim vektoru olarak kullanmistir.

Teknik Detaylar

CVSS: 8.8/10
Etkilenen: Exchange 2016 CU23, Exchange 2019 CU12/CU13

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs