Kaspersky ID:
KLA12169
検出日:
05/11/2021
更新日:
01/28/2026

説明

Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remotely to execute arbitrary code.
  2. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
  3. A security feature bypass vulnerability in Microsoft Exchange Server can be exploited remotely to bypass security restrictions.

オリジナルアドバイザリー

エクスプロイテーション

This vulnerability can be exploited by the following malware:

https://threats.kaspersky.com/en/threat/Exploit.Win32.ProxyShell/

Public exploits exist for this vulnerability.

関連製品

CVEリスト

  • CVE-2021-31198
    critical
  • CVE-2021-31209
    critical
  • CVE-2021-31207
    high
  • CVE-2021-31195
    critical

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.