Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Very High


Disclosure Date: July 14, 2021 (last updated December 29, 2023)
Microsoft Exchange Server Remote Code Execution Vulnerability
Attacker Value
Very High

ProxyShell Exploit Chain

Last updated December 28, 2023
ProxyShell is an exploit chain targeting on-premise installations of Microsoft Exchange Server. It was demonstrated by Orange Tsai at Pwn2Own in April 2021 and is comprised of three CVEs that, when chained, allow a remote unauthenticated attacker to execute arbitrary code on vulnerable targets. The three CVEs are CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207. Details are available in Orange Tsai's [Black Hat USA 2020 talk]( and follow-on [blog series]( ProxyShell is being broadly exploited in the wild as of August 12, 2021.