Description
Microsoft Exchange Autodiscover 中存在多个远程代码执行漏洞，该漏洞是由于Exchange组件对用户发送的数据验证不足导致的。
Microsoft Exchange Autodiscover 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.fortinet.com/blog/threat-research/microsoft-exchange-zero-day-vulnerability-updates
https://www.sentinelone.com/vulnerability-database/cve-2022-41082/
https://www.picussecurity.com/resource/blog/proxynotshellcve-2022-41040-and-cve-2022-41082-exploits-explained
https://www.kb.cert.org/vuls/id/915563
https://www.secrss.com/articles/47582
https://www.cc.ntu.edu.tw/chinese/cert/cert20221012.asp
https://research.splunk.com/web/d436f9e7-0ee7-4a47-864b-6dea2c4e2752/
https://www.blumira.com/blog/zero-day-vulnerabilities-found-in-microsoft-exchange
https://support.microsoft.com/en-us/topic/description-of-security-update-1-for-exchange-server-2019-march-12-2024-kb5036401-9160baeb-6306-4384-a5c9-94b0a18cba8e
https://www.geekby.site/2021/10/exchange%E7%9B%B8%E5%85%B3%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/
https://www.fortiguard.com/encyclopedia/ips/50584
https://www.reddit.com/r/msp/comments/zt04qb/critical_vulnerability_microsoft_exchange_remote/