Skip to content
COOEY

EXPOSURES › CVE-2022-41080

CVE-2022-41080

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2023-01-10 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-41080 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 85/100 ransomwarerceexploited-in-wildunpatchedprivilege-escalationnegligence

Microsoft Exchange Server privilege escalation vulnerability (CVE-2022-41080) chainable with RCE CVE-2022-41082 enables full system compromise.

This vulnerability allows attackers to escalate privileges on Microsoft Exchange Server, which is chainable with CVE-2022-41082 to achieve remote code execution. DIB organizations must ensure Exchange Server is patched to the latest version, as older versions like Exchange 2019 no longer receive public security updates. Failure to patch exposes organizations to ransomware and data breaches.

Shame score — Systemic validation and deserialization issues in Exchange Server led to multiple critical RCE vulnerabilities, including ProxyLogon and ProxyNotShell, indicating severe avoidable negligence.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized