Actively exploited · Published Nov 14, 2018 · Assigned by microsoft
CVE-2018-8581
High 7.4 Exploited Ransomware
In plain English
A high-severity security flaw in Microsoft Exchange Server from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 27.6% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Mar 17, 2022.
Official description
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Exchange Server | 2010201320162019 |
References
- 1042141 vdb-entry, x_refsource_SECTRACK
- 105837 vdb-entry, x_refsource_BID
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8581 government-resource