CVE-2020-06888.8High
CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Microsoft · Exchange Server
No fix listed · Affected: Microsoft Exchange Server · Exploitation: in CISA KEV since 3 Nov 2021
Known ransomware useExploitation attributed to NightEagle (according to Kaspersky’s Global Emergency Response Team)
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue3 Nov 2021
- Exploited (reported)Kaspersky’s Global Emergency Response Team, via SecurityOnline21 Sep
- Scanning observed: not seen
- Proof of concept public: not seen
- Not established: not seen
Who exploits it, and who says so
99.9%probability of exploitation in the next 30 days
99th percentile
050100
Higher than 99% of scored CVEs
8.8HighCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 3 Nov · catalogue entry
Passed 1646 days ago
DescriptionNVD
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
What changed
- CISA’s KEV entry now notes known ransomware use CISA
- SecurityOnline reported exploitation by NightEagle SecurityOnline
- CISA added it to the KEV catalogue CISA
CISA required action
Apply updates per vendor instructions.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 21 Sep.
- NightEagle Hackers Target Russian Firms With GhostContainer BackdoorSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.