H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-09-30
Last seen2022-09-30

Confidence

—

Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft Exchange Server
Added2022-09-30
Due date2022-10-21
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2022-41082
open
cwe
CWE-502
open