CVE-2022-3294

Vulnerability updated 5 months ago (2024-05-04T20:09:11.564Z)
Download STIX
Preview STIX
CVE-2022-3294 is a critical vulnerability that affects multiple versions of the Microsoft Exchange Server. This vulnerability allows an attacker to execute arbitrary code on affected systems and gain complete control over them. The exploit requires no user interaction, making it particularly dangerous as it can be carried out remotely without any authentication. This vulnerability was first discovered by researchers at Devcore and reported to Microsoft in May 2022. Microsoft released a patch for the vulnerability on June 14, 2022, as part of the monthly security updates. However, it is estimated that tens of thousands of organizations were still vulnerable to this attack when the patch was released, as many had not yet applied previous Exchange patches. In the following days after Microsoft's patch release, there were reports of attacks exploiting this vulnerability in the wild. These attacks were believed to be carried out by a Chinese state-sponsored hacking group known as Hafnium, which had also previously targeted the Microsoft Exchange Server in 2021. As a result, it is highly recommended that organizations running affected versions of the Microsoft Exchange Server apply the necessary patches immediately to prevent exploitation.
Description last updated: 2023-06-23T16:16:06.960Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2022-3294 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CISA
8 months ago
CERT-EU
a year ago