What is CVE-2020-17144?

CVE-2020-17144 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Exchange Remote Code Execution Vulnerability

Which CVE IDs does CVE-2020-17144 cover?

CVE-2020-17144 covers the following CVE IDs: CVE-2020-17144. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-17144?

CVE-2020-17144 has a CVSS v3 base score of 8.4, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-17144?

CVE-2020-17144 affects 1 product, including: Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31.

CVE-2020-17144HighCVSS 8.4

Microsoft Exchange Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 8, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-17144 →

📋 Description

What can cause this vulnerability? The vulnerability occurs due to improper validation of cmdlet arguments. Does the attacker need to be in an authenticated role in the Exchange Server? Yes, the attacker must be authenticated.

🎯 Affected products1

Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31

✅ Remediation

KB4593467 (Security Update)

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144
patchhttps://www.microsoft.com/download/details.aspx?familyid=565a516b-f84f-4aff-ba8c-1c57c378b418
referencehttps://support.microsoft.com/help/4593467