CVE

CVE-2021-42321

P1⬤ KNOWN RANSOMWARE USE

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange

Date added (CISA)

2021-11-17

Remediation due

2021-12-01

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.