All CVE records
CVE-2022-41082 — Microsoft Exchange Server Remote Code Execution Vulnerability
Known ransomware use
CISA KEV listed
Added September 30, 2022 Remediate by October 21, 2022
Description
Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/; https://nvd.nist.gov/vuln/detail/CVE-2022-41082
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.