Shulou(Shulou.com)11/24 Report--

CTOnews.com November 19 news, citing foreign media Bleeping Computer reported that Microsoft Microsoft Exchange exposed two high-risk security vulnerabilities ProxyNotShell, there is already relevant evidence that these two vulnerabilities have been exploited by hackers to launch attacks.

CTOnews.com learned that the two vulnerability tracking numbers CVE-2022-41082 and CVE-2022-41040 were affected by Microsoft Microsoft Exchange Server 2013, 2016 and 2019. The vulnerability allows an attacker to escalate privileges, run PowerShell on the system, and obtain arbitrary or remote code execution on the attacked server.

Microsoft has fixed these two security vulnerabilities in a cumulative update released on Tuesday, November 2022. However, the evidence suggests that hackers exploited ProxyNotShell vulnerabilities as early as September 2022.

Will Dormann, a senior vulnerability analyst at ANALYGENCE, tested the security update, confirmed it was valid for Exchange Server 2016 and 2019 systems, and added that fixing the Exchange Server 2013 code required some adjustments.

"these vulnerabilities affect Exchange servers. Exchange Online customers have been protected from these vulnerabilities," the Exchange team said after the patch was released.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.