CVE-2021-31209HighCVSS 6.5
Microsoft Exchange Server Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Was this vulnerability found in the 2021 Pwn2Own contest? Yes, this was one of the Exchange Server vulnerabilities found in the 2021 Pwn2Own contest.
🎯 Affected products5
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2016 Cumulative Update 20
- Microsoft Exchange Server 2019 Cumulative Update 8
- Microsoft Exchange Server 2019 Cumulative Update 9
✅ Remediation
KB5003435 (Security Update) — fixed build 15.02.0858.012 KB5003435 (Security Update) — fixed build 15.01.2242.010 KB5003435 (Security Update) — fixed build 15.00.1497.018 KB5003435 (Security Update) — fixed build 15.01.2176.014 KB5003435 (Security Update) — fixed build 15.02.0792.015
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31209
- patchhttp://www.microsoft.com/download/details.aspx?familyid=9536f4a0-838b-40a6-b625-36cd7a6229a1
- referencehttps://support.microsoft.com/help/5003435
- patchhttp://www.microsoft.com/download/details.aspx?familyid=e8857a66-5eb5-4b0e-b938-07eb17c3af1a
- patchhttp://www.microsoft.com/download/details.aspx?familyid=91b8d31b-dcd8-4e3c-a262-8229a0d060d4
- patchhttp://www.microsoft.com/download/details.aspx?familyid=68b339e9-3040-4da8-8e57-6fd325cfa9ee
- patchhttp://www.microsoft.com/download/details.aspx?familyid=0ff8a768-1dfb-4d50-acd4-87f5a1b34e5f