ID:6738 - Exploit for Code Injection in Microsoft Exchange Server - CVE-2021-31195

 
Main Vulnerability Database Exploits ID:6738 - Exploit for Code Injection in Microsoft Exchange Server - CVE-2021-31195

ID:6738 - Exploit for Code Injection in Microsoft Exchange Server - CVE-2021-31195

Published: September 12, 2021


Vulnerability identifier: #VU53083
Vulnerability risk: High
CVE-ID: CVE-2021-31195
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
Microsoft Exchange Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in Microsoft Exchange Server. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.