CVE-2020-17144

Wednesday, December 09, 2020

8.4

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

Summary

Microsoft Exchange Remote Code Execution Vulnerability

Affected Software

Vendor	Product	Version Range	Status
Microsoft	Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31	`0 < publication`	affected

Weaknesses

Remote Code Execution

ADP Enrichment

CVE Program Container

Additional References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17144

CISA ADP Vulnrichment

SSVC:
Exploitation: active
- Automatable: yes
- Technical Impact: total

Additional References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17144

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.