⚠ Actively exploited
Added to CISA KEV on 2024-02-15. Federal agencies required to patch by 2024-03-07. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..

CVE-2024-21410

CWE-287 — Improper Authentication8 documents8 sources
Severity
9.8CRITICAL
EPSS
6.1%
top 9.18%
CISA KEV
KEV
Added 2024-02-15
Due 2024-03-07
Exploit
Exploited in wild
Active exploitation observed
Affected products
4
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23Microsoft Microsoft Exchange Server 2019 Cumulative Update 13Microsoft Microsoft Exchange Server 2019 Cumulative Update 14+1 more
Timeline
PublishedFeb 13
KEV addedFeb 15
Latest updateFeb 19
KEV dueMar 7
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶NVDmicrosoft/exchange_server2016, 2019+1

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

3
CVEList
Microsoft Exchange Server Elevation of Privilege Vulnerability↗2024-02-13
▶
GHSA
GHSA-mv5v-r4x4-qmxw: Microsoft Exchange Server Elevation of Privilege Vulnerability↗2024-02-13
▶
VulnCheck
Microsoft Exchange Server Privilege Escalation Vulnerability↗2024
▶

📋Vendor Advisories

2
CISA
Microsoft Exchange Server Privilege Escalation Vulnerability↗2024-02-15
▶
Microsoft
Microsoft Exchange Server Elevation of Privilege Vulnerability↗2024-02-13
▶

🕵️Threat Intelligence

2
Bleepingcomputer
Over 28,500 Exchange servers vulnerable to actively exploited bug↗2024-02-19
▶
Huntress
CVE-2024-21410 Vulnerability: Analysis, Impact, Mitigation | Huntress↗
▶