Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft Exchange Server 2016 Cumulative Update 21
15.01.0 to < 15.01.2308.020affected
Microsoft Microsoft Exchange Server 2016 Cumulative Update 22
15.0.0 to < 15.01.2375.017affected
Microsoft Microsoft Exchange Server 2019 Cumulative Update 10
15.02.0 to < 15.02.0792.019affected
Microsoft Microsoft Exchange Server 2019 Cumulative Update 11
15.02.0 to < 15.02.0986.014affected
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42321 ↗
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42321 ↗
- http://packetstormsecurity.com/files/166153/Microsoft-Exchange-Server-Remote-Code-Execution.html ↗
- http://packetstormsecurity.com/files/168131/Microsoft-Exchange-Server-ChainedSerializationBinder-Remote-Code-Execution.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42321 ↗