CVE-2021-26858 - Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26

CVE Details

CVE-2021-26858

Summary

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, CVE-2021-27078.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858

Vulnerable Configurations

cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 08-03-2021 - 20:46)
Impact:	6.4
Exploitability:	8.6

CWE

NVD-CWE-noinfo

CAPEC

Click the CAPEC title to display a description

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

CVSS v3.1

Base:	7.8 (as of 08-03-2021 - 20:46)
Impact:	5.9
Exploitability:	1.8

Exploitability v3.1

Attack Complexity	Attack vector	Privileges Required	Scope	User Interaction
LOW	LOCAL	NONE	UNCHANGED	REQUIRED

Impact v3.1

Confidentiality	Integrity	Availability
HIGH	HIGH	HIGH

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

cvss3-vector via4

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last major update

08-03-2021 - 20:46

Published

03-03-2021 - 00:15

Last modified

08-03-2021 - 20:46