← Back to CVE List
CVE-2021-34523NVD
Vulnerability Summary
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS v3.1 Base Metrics — Score 9.0 (CRITICAL)
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
Affected & Patched Versions
- Microsoft Exchange Server
Not provided by NVD for this CVE.
External References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34523
- http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34523
- https://www.zerodayinitiative.com/advisories/ZDI-21-822/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-34523