Main Vulnerability Database Vulnerabilities #VU54702

Code Injection in Microsoft Exchange Server - CVE-2021-31196

Published: July 13, 2021 / Updated: August 21, 2024

Vulnerability identifier: #VU54702

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-31196

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in the Microsoft Exchange Server. A remote administrator can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Microsoft Exchange Server

How to mitigate CVE-2021-31196

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #6737 - ProxyVulns ([ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.) (September 12, 2021)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196

Related Security Bulletins

Multiple vulnerabilities in Microsoft Exchange Server