CVSS 8.8 High EXPLOITED Patched 2023

CVE-2023-36745

Microsoft Exchange Server remote code execution vulnerability. Critical Exchange vulnerability used in Ursnif and corporate network infiltration. It can be exploited without requiring authentication.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Exchange Server 2016/2019

Exploitation Method Remote Code Execution

MITRE ATT&CK T1210 - Exploitation of Remote Services

CVE-2023-36745 Analizi

Microsoft Exchange Server kritik RCE acigi. Kimlik dogrulama olmaksizin uzaktan kod calistirma imkani taniyor. Ursnif grubu bu acigi Exchange sunucularini ilk erisim vektoru olarak kullanmistir.

Teknik Detaylar

CVSS: 8.8/10
Etkilenen: Exchange 2016 CU23, Exchange 2019 CU12/CU13

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs