CVE

CVE-2020-0688

P1⬤ KNOWN RANSOMWARE USE

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Microsoft · Exchange Server

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Associated with

Related to

Description

Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.