Vulnerability Details : CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability
Vulnerability category: Execute code
Published 2021-11-10 01:19:50
Updated 2022-08-29 18:59:06
View at NVD,
At least one public exploit which can be used to exploit this vulnerability exists!
CVE-2021-42321 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Added on 2021-11-17 Action due date 2021-12-01

Exploit prediction scoring system (EPSS) score for CVE-2021-42321

Probability of exploitation activity in the next 30 days: 95.16%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2021-42321

  • Microsoft Exchange Server ChainedSerializationBinder RCE
    Disclosure Date : 2021-12-09
    This module exploits vulnerabilities within the ChainedSerializationBinder as used in Exchange Server 2019 CU10, Exchange Server 2019 CU11, Exchange Server 2016 CU21, and Exchange Server 2016 CU22 all prior to Mar22SU. Note that authentication is required to exploit these vulnerabilities. Authors: - pwnforsp - zcgonvh - Microsoft Threat Intelligence Center - Microsoft Security Response Center - peterjson - testanull - Grant Willcox - Spencer McIntyre - Markus Wulftange

CVSS scores for CVE-2021-42321

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source
[email protected]
[email protected]

References for CVE-2021-42321

Products affected by CVE-2021-42321

This web site uses cookies for managing your session and website analytics (Google analytics) purposes as described in our privacy policy.
By using this web site you are agreeing to terms of use!