ProxyShell: Attackers Actively Scanning for Vulnerable Microsoft Exchange Servers (CVE-2021-34473)

At Black Hat last week, DEVCORE researcher Orange Tsai presented three vulnerabilities in Microsoft Exchange Server that could be chained together to achieve unauthenticated remote code execution. All three vulnerabilities have been patched by Microsoft. 

On August 6, security researcher Kevin Beaumont reported attempts to exploit this vulnerability chain in the wild. By chaining these vulnerabilities, an attacker could execute arbitrary commands on vulnerable Exchange servers on port 443.

For more information, please visit our blog.