PT-2021-3006

CVE-2021-31207

Published

2021-05-11

Updated

2026-09-28

Description by

CVSS 2.0

7.6

High

MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description A security feature bypass in Microsoft Exchange Server allows a remote attacker to bypass security mechanisms and execute arbitrary code with SYSTEM privileges. This issue involves an arbitrary file write capability that can lead to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Orange Tsai

Vendors

Affected products

Weakness enumeration

CWE-254

CWE-434: Unrestricted Upload of File with Dangerous Type

Related identifiers